Description
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
Metrics
CVSS 2.0 4.7/10
AV:L/AC:M/Au:N/C:N/I:N/A:CWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Jun 21, 2012
- Last modified
- Jun 16, 2026
- NVD status
- Modified