A vulnerability in the Linux kernel's ksmbd component involves insufficient allocation of space for a UTF-16 terminator in stream information. The function smb_strtoUTF16() writes a terminating UTF-16 zero unit after converted characters, but the allocation in get_file_stream_info() does not reserve space for this terminator, causing a buffer overflow by two bytes when the stream entry exactly fills the 448-byte response buffer. The fix involves reserving one extra UTF-16 unit in the allocation checks. The terminator is not part of the wire format, so reported lengths remain unchanged.