CVE-2026-72044

The vulnerability affects the Linux kernel's ksmbd component, specifically in the handling of session keys during NTLM and Kerberos authentication, where improper length checks allow for a stack buffer overflow. This flaw could lead to a potential denial of service or arbitrary code execution due to memory corruption, impacting systems using affected versions of Exchange on Linux. Organizations utilizing Linux-based Exchange services should prioritize patching this vulnerability to mitigate the risk of exploitation.