CVE-2024-41030

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/07/2024
Last modified:
29/07/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ksmbd: discard write access to the directory open<br /> <br /> may_open() does not allow a directory to be opened with the write access.<br /> However, some writing flags set by client result in adding write access<br /> on server, making ksmbd incompatible with FUSE file system. Simply, let&amp;#39;s<br /> discard the write access when opening a directory.<br /> <br /> list_add corruption. next is NULL.<br /> ------------[ cut here ]------------<br /> kernel BUG at lib/list_debug.c:26!<br /> pc : __list_add_valid+0x88/0xbc<br /> lr : __list_add_valid+0x88/0xbc<br /> Call trace:<br /> __list_add_valid+0x88/0xbc<br /> fuse_finish_open+0x11c/0x170<br /> fuse_open_common+0x284/0x5e8<br /> fuse_dir_open+0x14/0x24<br /> do_dentry_open+0x2a4/0x4e0<br /> dentry_open+0x50/0x80<br /> smb2_open+0xbe4/0x15a4<br /> handle_ksmbd_work+0x478/0x5ec<br /> process_one_work+0x1b4/0x448<br /> worker_thread+0x25c/0x430<br /> kthread+0x104/0x1d4<br /> ret_from_fork+0x10/0x20

Impact