CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux. It may lead to a denial-of-service condition.
CVE
CVE-2009-0935
Severity
MEDIUM
CVSS
5.5
EPSS
0.27%
Linux
Original NVD Description
The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.