Kernel Vulnerability in Linux Affecting fsnotify Mechanism

CVE-2026-99175

What is CVE-2026-99175?

The Linux kernel contains a vulnerability in the fsnotify mechanism that arises during connector teardown, allowing new marks to be inserted before the existing ones are fully detached. This race condition can lead to improper handling of object references. Specifically, an unprivileged read during the final detachment can result in dereferencing a null pointer, potentially leading to system instability. This vulnerability affects the integrity of the kernel's resource management and necessitates prompt attention to maintain system reliability.

References