Yup! And if an attacker hacks this module they can hijack the kernel. And it can probably be reached by anyone on the same network, or may even be exposed to the internet :|
You mean like the TCP/IP stack?
And if I could move that into user space without a hideous performance and/or compatibility penalty, I probably would.
Good point, but SMB has earned quite a reputation in this area.