Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting events with an invalid wd value. When inotifyfreeingmark races with inotifyhandleinodeevent, it is possible that inotifyhandle inodeevent sees that imark-wd has already been reset to -1 and reports this...

systemd security update

252-55.0.3.el97.9 - serialize: don't allocate 1M on the stack just like that LINUX-16166 - Route logs from container mapped uids to the system journal Orabug: 38135007 - Drop delay when nspawn fails to reset loginuid Orabug: 37793135 - Improve logging for api bus connection and subscribers Orabug...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001107 advisory. Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004369 advisory. In the Linux kernel through 5.0.2, the function inotifyupdateexistingwatch in fs/notify/inotify/inotifyuser.c neglects to call fsnotifyputmark with INMASKCREATE afte...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003821 advisory. In the Linux kernel through 5.0.2, the function inotifyupdateexistingwatch in fs/notify/inotify/inotifyuser.c neglects to call fsnotifyputmark with INMASKCREATE afte...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003296 advisory. Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003451 advisory. Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption...

MiracleLinux 4 : sssd-1.5.1-34.AXS4.3 (AXSA:2011-634:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-634:01 advisory. Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a...

UBUNTU-CVE-2025-68788

In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users with no read access to a file to subscribe to events e.g. INACCESS/INMODIFY, but they do allow the same user to subscri...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/notify: Calling intotifyshowfdinfo on a file descriptor that watches an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing a NULL pointer. This issue was discovered by syzkaller. Race Condition...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000322 advisory. In the Linux kernel through 5.0.2, the function inotifyupdateexistingwatch in fs/notify/inotify/inotifyuser.c neglects to call fsnotifyputmark with INMASKCREATE afte...

SUSE CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

Linux Distros Unpatched Vulnerability : CVE-2023-54119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that...

EUVD-2023-60326

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

UBUNTU-CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

CVE-2023-54119

CVE-2023-54119 (inotify) is addressed by kernel updates in SUSE advisories (e.g., SUSE-SU-2026:0316-1 and related). The issue was a race between inotify_freeing_mark() and inotify_handle_inode_event() where an i_mark->wd could be reset to -1, causing userspace to see an invalid wd; fix validat...

CVE-2023-54119 inotify: Avoid reporting event with invalid wd

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

CVE-2023-54119 inotify: Avoid reporting event with invalid wd

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...