A vulnerability in the Linux kernel SMB client allows out-of-bounds memory writes when processing SetEA requests with extended attribute values that do not fit the request buffer. This occurs because the CIFSSMBSetEA() function copies the extended attribute value without properly checking buffer size limits before the copy operation, potentially leading to memory corruption.