CVE-2023-54119
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with inotify_handle_inode_event() it can happen that inotify_handle_inode_event() sees that i_mark->wd got already reset to -1 and reports this value to userspace which can confuse the inotify listener. Avoid the problem by validating that wd is sensible (and pretend the mark got removed before the event got generated otherwise).
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux8fb33166aed888769ea63d6af49515893f8a1f14, 2d65c97777e5b4a845637800d5d7b648f5772106, 17ad86d8c12220de97e80d88b5b4c934a40e1812, 145f54ea336b06cf4f92eeee996f2ffca939ea43, fb3294998489d39835006240e9c6e6b2ac62022e, a48bacee05860c6089c3482bcdc80720b0ee5732, c915d8f5918bea7c3962b09b8884ca128bfd9b0c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < 8fb33166aed888769ea63d6af49515893f8a1f14, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < 2d65c97777e5b4a845637800d5d7b648f5772106, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < 17ad86d8c12220de97e80d88b5b4c934a40e1812, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < 145f54ea336b06cf4f92eeee996f2ffca939ea43, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < fb3294998489d39835006240e9c6e6b2ac62022e, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < a48bacee05860c6089c3482bcdc80720b0ee5732, 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 ≤ v < c915d8f5918bea7c3962b09b8884ca128bfd9b0c, 2.6.31 | 8fb33166aed888769ea63d6af49515893f8a1f14, 2d65c97777e5b4a845637800d5d7b648f5772106, 17ad86d8c12220de97e80d88b5b4c934a40e1812, 145f54ea336b06cf4f92eeee996f2ffca939ea43, fb3294998489d39835006240e9c6e6b2ac62022e, a48bacee05860c6089c3482bcdc80720b0ee5732, c915d8f5918bea7c3962b09b8884ca128bfd9b0c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.