A high-severity vulnerability (CVE-2024-26954) in the Linux kernel's ksmbd component allows a slab-out-of-bounds read due to improper validation of the NameOffset field in smb2_create_req. This flaw is fixed by enforcing a minimum value for the name offset to prevent out-of-bounds memory access.