CVE-2023-54119

A race condition was found in the Linux kernel's inotify subsystem. When inotify_freeing_mark() races with inotify_handle_inode_event(), the event handler may read i_mark->wd after it has been reset to -1. This causes an invalid watch descriptor value of -1 to be reported to userspace applications, potentially confusing inotify listeners.

This flaw results in incorrect data being delivered to userspace applications via the inotify interface. While applications may become confused by receiving an invalid watch descriptor, this does not cause a kernel crash or memory corruption. The impact is limited to potential misbehavior in userspace file monitoring applications.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.