CVE-2019-9857

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.2

Description The issue is related to the function inotify update existing watch() in fs/notify/inotify/inotify user.c, which neglects to call fsnotify put mark() with IN MASK CREATE after fsnotify find mark(), leading to a memory leak, also known as a refcount leak. This can cause a denial of service. The vulnerability is associated with an insufficient memory release mechanism, allowing an attacker to cause a service disruption.

Recommendations For Linux kernel versions prior to 5.0.2, update to version 5.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the inotify update existing watch() function until a patch is available.