In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob()
If authblob->SessionKey.Length is bigger than session key size(CIFSKEYSIZE), slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from SessionKey from client.