An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length.
5.3.0-18.195.3.0-24.265.4.0-9.126.11.0-8.86.5.0-9.93.11.0-12.194.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.13.0-16.195.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.235.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.36+26 more5.15.0-83.925.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.16.11.0-1004.46.5.0-1008.8Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:NA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H