In the Linux kernel, the following vulnerability has been resolved:
binder: make sure fd closes complete
During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes.
Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.75-79.358Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-develUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dtb-amdUpgrade ocfs2-kmp-64kb | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-gcp-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub