Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54119

inotify: Avoid reporting event with invalid wd

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with inotify_handle_inode_event() it can happen that inotify_handle_inode_event() sees that i_mark->wd got already reset to -1 and reports this value to userspace which can confuse the inotify listener. Avoid the problem by validating that wd is sensible (and pretend the mark got removed before the event got generated otherwise).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < 8fb33166aed888769ea63d6af49515893f8a1f14affected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < 2d65c97777e5b4a845637800d5d7b648f5772106affected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < 17ad86d8c12220de97e80d88b5b4c934a40e1812affected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < 145f54ea336b06cf4f92eeee996f2ffca939ea43affected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < fb3294998489d39835006240e9c6e6b2ac62022eaffected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < a48bacee05860c6089c3482bcdc80720b0ee5732affected
  • 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 to < c915d8f5918bea7c3962b09b8884ca128bfd9b0caffected

Linux Linux

Default version status: affected

  • 2.6.31affected
  • 0 to < 2.6.31unaffected
  • 5.4.243 to ≤ 5.4.*unaffected
  • 5.10.180 to ≤ 5.10.*unaffected
  • 5.15.112 to ≤ 5.15.*unaffected
  • 6.1.29 to ≤ 6.1.*unaffected
  • 6.2.16 to ≤ 6.2.*unaffected
  • 6.3.3 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References