NetSight
IP …
medium5.5

CVE-2021-47360

In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA …

Impact

In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes. Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.4.150
from 5.5 before 5.10.70
from 5.11 before 5.14.9
Versions 4.20.1, 5.15

Weakness classification

CWE-252

References