CVE-2023-54119
published 2025-12-24CVE-2023-54119: In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with…
PriorityP418low3.3
EPSS
0.19%
9.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < 8fb33166aed888769ea63d6af49515893f8a1f14 | 8fb33166aed888769ea63d6af49515893f8a1f14 |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < 2d65c97777e5b4a845637800d5d7b648f5772106 | 2d65c97777e5b4a845637800d5d7b648f5772106 |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < 17ad86d8c12220de97e80d88b5b4c934a40e1812 | 17ad86d8c12220de97e80d88b5b4c934a40e1812 |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < 145f54ea336b06cf4f92eeee996f2ffca939ea43 | 145f54ea336b06cf4f92eeee996f2ffca939ea43 |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < fb3294998489d39835006240e9c6e6b2ac62022e | fb3294998489d39835006240e9c6e6b2ac62022e |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < a48bacee05860c6089c3482bcdc80720b0ee5732 | a48bacee05860c6089c3482bcdc80720b0ee5732 |
| linux | linux | >= 7e790dd5fc937bc8d2400c30a05e32a9e9eef276 < c915d8f5918bea7c3962b09b8884ca128bfd9b0c | c915d8f5918bea7c3962b09b8884ca128bfd9b0c |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 2.6.31 < 5.4.243 | 5.4.243 |
| linux | linux_kernel | >= 5.11.0 < 5.15.112 | 5.15.112 |
| linux | linux_kernel | >= 5.16.0 < 6.1.29 | 6.1.29 |
| linux | linux_kernel | >= 5.5.0 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2.0 < 6.2.16 | 6.2.16 |
| linux | linux_kernel | >= 6.3.0 < 6.3.3 | 6.3.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: inotify: Avoid reporting event with invalid wd
vendor_redhat·2025-12-24·CVSS 3.3
CVE-2023-54119 [LOW] CWE-367 kernel: inotify: Avoid reporting event with invalid wd
kernel: inotify: Avoid reporting event with invalid wd
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
A race condition was found in the Linux kernel's inotify subsystem. When inotify_freeing_mark() races with inotify_handle_inode_event(), the event handler may read i_mark->wd after it has been reset to -1. This causes an invalid watch descriptor value of -1 to b
Debian
CVE-2023-54119: linux - In the Linux kernel, the following vulnerability has been resolved: inotify: Av...
vendor_debian·2023
CVE-2023-54119 CVE-2023-54119: linux - In the Linux kernel, the following vulnerability has been resolved: inotify: Av...
In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with inotify_handle_inode_event() it can happen that inotify_handle_inode_event() sees that i_mark->wd got already reset to -1 and reports this value to userspace which can confuse the inotify listener. Avoid the problem by validating that wd is sensible (and pretend the mark got removed before the event got generated otherwise).
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
GHSA
GHSA-wgxf-ch55-cw7h: In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races
ghsa_unreviewed·2025-12-24
CVE-2023-54119 GHSA-wgxf-ch55-cw7h: In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
OSV
inotify: Avoid reporting event with invalid wd
osv·2025-12-24
CVE-2023-54119 inotify: Avoid reporting event with invalid wd
inotify: Avoid reporting event with invalid wd
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
OSV
CVE-2023-54119: In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races w
osv·2025-12-24
CVE-2023-54119 CVE-2023-54119: In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races w
In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with inotify_handle_inode_event() it can happen that inotify_handle_inode_event() sees that i_mark->wd got already reset to -1 and reports this value to userspace which can confuse the inotify listener. Avoid the problem by validating that wd is sensible (and pretend the mark got removed before the event got generated otherwise).
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54119 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54119 CVE-2023-54119 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54119 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile
Bugzilla
CVE-2023-54119 kernel: inotify: Avoid reporting event with invalid wd
bugzilla·2025-12-24
CVE-2023-54119 [LOW] CVE-2023-54119 kernel: inotify: Avoid reporting event with invalid wd
CVE-2023-54119 kernel: inotify: Avoid reporting event with invalid wd
In the Linux kernel, the following vulnerability has been resolved:
inotify: Avoid reporting event with invalid wd
When inotify_freeing_mark() races with inotify_handle_inode_event() it
can happen that inotify_handle_inode_event() sees that i_mark->wd got
already reset to -1 and reports this value to userspace which can
confuse the inotify listener. Avoid the problem by validating that wd is
sensible (and pretend the mark got removed before the event got
generated otherwise).
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2023-54119-fbd4@gregkh/T
https://git.kernel.org/stable/c/145f54ea336b06cf4f92eeee996f2ffca939ea43https://git.kernel.org/stable/c/17ad86d8c12220de97e80d88b5b4c934a40e1812https://git.kernel.org/stable/c/2d65c97777e5b4a845637800d5d7b648f5772106https://git.kernel.org/stable/c/8fb33166aed888769ea63d6af49515893f8a1f14https://git.kernel.org/stable/c/a48bacee05860c6089c3482bcdc80720b0ee5732https://git.kernel.org/stable/c/c915d8f5918bea7c3962b09b8884ca128bfd9b0chttps://git.kernel.org/stable/c/fb3294998489d39835006240e9c6e6b2ac62022e
2025-12-24
Published