A vulnerability in the Linux kernel's ksmbd component involves uninitialized FileSystemControlFlags in the FS_CONTROL_INFORMATION structure. This can cause information leakage in compound SMB2 requests due to leftover data in the response buffer. The issue arises because the buffer is zeroed on allocation but not fully cleared on certain error responses, allowing stale data to be sent to clients. ksmbd does not implement quota tracking and reports no control flags, which is related to the flaw.