CVE-2024-41030: 
Linux Debian vulnerability analysis and mitigation

CVE-2024-41030 is a vulnerability discovered in the Linux kernel's ksmbd module, specifically related to directory access permissions. The issue was identified on July 29, 2024, where the may_open() function incorrectly handled write access permissions for directories. The vulnerability affects the Linux kernel's SMB server implementation (ksmbd) (Kernel Git).

The vulnerability stems from a mismatch between client-set writing flags and server-side access permissions in the ksmbd module. When opening a directory, some writing flags set by the client resulted in adding write access on the server, making ksmbd incompatible with FUSE file system. This led to a list_add corruption where the next pointer becomes NULL, triggering a kernel BUG at lib/list_debug.c:26 (Kernel Git).

The vulnerability could lead to a kernel bug when attempting to open directories with specific access permissions, particularly affecting systems using both ksmbd and FUSE file systems. This could potentially result in system instability or denial of service conditions (NVD).

The vulnerability can be triggered when attempting to open a directory with write access through the SMB protocol using the ksmbd module. The issue manifests specifically in the interaction between ksmbd and FUSE file systems (Kernel Git).

The issue has been fixed by modifying the smb2_create_open_flags function to explicitly discard write access when opening a directory. The fix involves adding a check for directory access and removing the FILE_WRITE_DESIRE_ACCESS_LE flag in such cases (Kernel Git).