CVE-2024-41030: ksmbd: discard write access to the directory open
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: discard write access to the directory open
mayopen() does not allow a directory to be opened with the write access. However, some writing flags set by client result in adding write access on server, making ksmbd incompatible with FUSE file system. Simply, let's discard the write access when opening a directory.
listadd corruption. next is NULL. ------------[ cut here ]------------ kernel BUG at lib/listdebug.c:26! pc : listaddvalid+0x88/0xbc lr : listaddvalid+0x88/0xbc Call trace: listaddvalid+0x88/0xbc fusefinishopen+0x11c/0x170 fuseopencommon+0x284/0x5e8 fusediropen+0x14/0x24 dodentryopen+0x2a4/0x4e0 dentryopen+0x50/0x80 smb2open+0xbe4/0x15a4 handleksmbdwork+0x478/0x5ec processonework+0x1b4/0x448 workerthread+0x25c/0x430 kthread+0x104/0x1d4 retfromfork+0x10/0x20
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41030?
CVE-2024-41030 has a medium severity rating due to improper write access controls in the Linux kernel.
How do I fix CVE-2024-41030?
To fix CVE-2024-41030, upgrade to the patched versions of the Linux kernel as specified in the affected software details.
Which versions of the Linux kernel are affected by CVE-2024-41030?
CVE-2024-41030 affects specific versions of the Linux kernel including 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, and 6.12.13-1.
What impact does CVE-2024-41030 have on system security?
CVE-2024-41030 could potentially allow unauthorized write access to directories, leading to data corruption or unauthorized modification.
Is CVE-2024-41030 specific to any particular Linux distribution?
CVE-2024-41030 has been reported primarily within the Debian distribution of the Linux kernel.