AZL-112850: CVE-2026-99273 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: reserve space for the UTF-16 terminator in stream info

smbstrtoUTF16() always writes a terminating zero UTF-16 unit after the converted characters, but getfilestreaminfo() budgets only sizeof(struct smb2filestreaminfo) + streamlen 2 for a stream entry and sizeof(struct smb2filestreaminfo) + 7 2 for the trailing "::$DATA" entry. When an entry exactly fills the 448-byte small response buffer, the terminator is written two bytes past the allocation.

Reserve one extra UTF-16 unit in both budget checks. The terminator is not part of the wire format, so the reported lengths are unchanged.