In the Linux kernel, the following vulnerability has been resolved:
binder: make sure fd closes complete
During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes.
Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-nvidia | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-kvm | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub