In the Linux kernel, the following vulnerability has been resolved:
binder: signal epoll threads of self-work
In (e)poll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDER_WRITE_READ without a read buffer and then make use of epoll_wait() or similar to consume any responses afterwards.
It is then crucial that epoll threads are signaled via wakeup when they queue their own work. Otherwise, they risk waiting indefinitely for an event leaving their work unhandled. What is worse, subsequent commands won't trigger a wakeup either as the thread has pending work.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 3, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 1, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-starfiveUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04 | May 17, 2024 | Feb 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub