CVE-2024-41030
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/07/2024
Last modified:
29/07/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ksmbd: discard write access to the directory open<br />
<br />
may_open() does not allow a directory to be opened with the write access.<br />
However, some writing flags set by client result in adding write access<br />
on server, making ksmbd incompatible with FUSE file system. Simply, let&#39;s<br />
discard the write access when opening a directory.<br />
<br />
list_add corruption. next is NULL.<br />
------------[ cut here ]------------<br />
kernel BUG at lib/list_debug.c:26!<br />
pc : __list_add_valid+0x88/0xbc<br />
lr : __list_add_valid+0x88/0xbc<br />
Call trace:<br />
__list_add_valid+0x88/0xbc<br />
fuse_finish_open+0x11c/0x170<br />
fuse_open_common+0x284/0x5e8<br />
fuse_dir_open+0x14/0x24<br />
do_dentry_open+0x2a4/0x4e0<br />
dentry_open+0x50/0x80<br />
smb2_open+0xbe4/0x15a4<br />
handle_ksmbd_work+0x478/0x5ec<br />
process_one_work+0x1b4/0x448<br />
worker_thread+0x25c/0x430<br />
kthread+0x104/0x1d4<br />
ret_from_fork+0x10/0x20