Linux Kernel ksmbd r_count Decrement/Increment Mismatch Vulnerability

A vulnerability in the Linux kernel's ksmbd component has been addressed, concerning an imbalance in the r_count reference counting. The issue arises because r_count is only incremented during an oplock break wait, leading to a scenario where the increments and decrements are not properly paired. This mismatch can cause r_count to become negative, potentially preventing the ksmbd thread from terminating as expected.

Impact

The reference count mismatch can cause the r_count to become negative, leading to a situation where the ksmbd thread does not terminate, potentially causing resource leaks or other unintended behavior.