Threats tagged 'ghsa-hwfq-rqvc-2qgh'

A vulnerability in the Linux kernel's ksmbd component allowed clients to create an unbounded number of valid SMB sessions on a single connection by repeatedly completing authentication, due to improper session limit enforcement. The issue has been addressed by reserving connection slots before session allocation and enforcing a configurable maximum sessions per connection, defaulting to 64. The fix also exposes this limit via procfs and maintains compatibility with existing request formats.