A heap overflow vulnerability in the Linux kernel's SMB client was fixed in the cifs_do_set_acl() function. The issue arises because the ACL size validation uses a smaller size calculation than the actual CIFS wire format size, leading to potential heap overflow when converting ACLs. The fix involves validating the CIFS format size against buffer limits and USHRT_MAX to prevent overflow and partial ACL application on the server.