In the Linux kernel, the following vulnerability has been resolved:
binder: make sure fd closes complete
During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes.
Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-default-livepatch | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linuxUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-azure-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub