CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux. It may lead to a denial-of-service condition.
CVE
CVE-2019-9857
Severity
MEDIUM
CVSS
5.5
EPSS
0.42%
Linux
Original NVD Description
In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)