Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
baef07895fca02ffacf267d405d435978b2686188ef7bf692a74c663aba84c69