#out-of-bounds

ksmbd ACL packing fixed to block malformed DACLs and OOB reads

Authenticated clients could force undersized ACL headers or heap out-of-bounds reads via crafted security descriptors.