Lucene search
+L

123 matches found

RedHat Linux
RedHat Linux
added 2 days ago6 views

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

7.1CVSS5.5AI score0.00142EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2 days ago6 views

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

7.1CVSS5.5AI score0.00142EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/22 11:40 a.m.7 views

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

7.1CVSS6.2AI score0.00142EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/21 6:24 p.m.12 views

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

7.1CVSS6.2AI score0.00142EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/26 11:34 a.m.17 views

CVE-2026-52990

A flaw was found in the Linux kernel. A local attacker could exploit a race condition in the fsnotifyrecalcmask function, which fails to properly handle an inode reference. This improper handling can lead to an inode reference leak, causing tasks to hang and resulting in a Denial of Service DoS f...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/26 2:14 a.m.7 views

SUSE CVE-2026-52990

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

5.8AI score0.00127EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/25 12:0 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-52990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode...

5.5CVSS5.5AI score0.00127EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/24 6:32 p.m.11 views

EUVD-2026-38858

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

5.7AI score0.00127EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/24 5:17 p.m.10 views

CVE-2026-52990

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

5.5CVSS0.00127EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.4 views

CVE-2026-52990

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

5.5CVSS5.6AI score0.00127EPSS
SaveExploits0References22
ATTACKERKB
ATTACKERKB
added 2026/06/24 4:29 p.m.6 views

CVE-2026-52990

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

5.6AI score0.00127EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/06/24 4:29 p.m.38 views

CVE-2026-52990 fsnotify: fix inode reference leak in fsnotify_recalc_mask()

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

0.00127EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/24 4:29 p.m.27 views

CVE-2026-52990

The CVE-2026-52990 issue affects the Linux kernel fsnotify subsystem, where fsnotify_recalc_mask() can leak an inode reference if the HAS_IREF flag transitions from true to false and the returned inode pointer is not released. A race between adding and detaching marks may skip proper cleanup, cau...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits0References4Affected Software1
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.2 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: fsnotify: Do not generate ACCESS/MODIFY events for special files in child processes. inotify/fanotify: Do not allow users who have no read access to a file to subscribe to events like INACCESS/INMODIFY. However, users can stil...

5.9AI score0.00177EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.13 views

PT-2026-51884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An inode reference leak exists in the fsnotify subsystem. The function fsnotify recalc mask fails to handle the return value of fsnotify recalc mask, which may return an inode pointer th...

5.5CVSS6AI score0.00127EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/28 6:37 p.m.14 views

CVE-2026-46150

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.5 views

CVE-2026-46150

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...

7.1CVSS6.2AI score0.00142EPSS
SaveExploits0References36
CVE
CVE
added 2026/05/28 9:36 a.m.53 views

CVE-2026-46150

The CVE-2026-46150 issue affects the Linux kernel fanotify subsystem. It arises because fsnotify_get_mark_safe() may return false for a mark in an unrelated group, bypassing the permission check. The fix patches the logic to skip detached marks that are not in the current group, mitigating the by...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/05/28 9:36 a.m.23 views

EUVD-2026-32777

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...

5.8AI score0.00142EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2026/05/28 8:8 a.m.12 views

inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails

...

5.5CVSS5.4AI score0.00123EPSS
SaveExploits0
Rows per page
Query Builder