THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-46040 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails When fsnotify_add_inode_mark_locked() fails in inotify_new_watch(), the error path calls inotify_remove_from_idr() but does not call dec

[NVD] CVE-2026-46040 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails When fsnotify_add_inode_mark_locked() fails in inotify_new_watch(), the error path calls inotify_remove_from_idr() but does not call dec

lownvdPublished 2026-05-27

CVE-2026-46040 CVSS: 5.5 MEDIUM Published: 2026-05-27T14:17:23.387

In the Linux kernel, the following vulnerability has been resolved:

inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails

When fsnotify_add_inode_mark_locked() fails in inotify_new_watch(), the error path calls inotify_remove_from_idr() but does not call dec_inotify_watches() to undo the preceding inc_inotify

Indicators of compromise

CVE-2026-46040cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-46040