In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix sd ndr.data memory leak in ksmbd vfs set sd xattr

ndr encode v4 ntacl() allocates sd ndr.data via kzalloc() at entry. If any subsequent ndr write *() call returns error during encoding, the allocated sd ndr.data won't be freed and causes memory leak.

Move kfree(sd ndr.data) into out label to ensure the buffer gets released on all success and error return paths.