CVE-2021-47360

Advisory lineage Upstream: 0 Downstream: 7
Analyzed
Published: 21 May 2024, 15:03
Last modified:23 May 2026, 15:19

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
<0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 May 2024, 15:03
Published
Vulnerability first disclosed
23 May 2026, 15:19
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes. Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 1%

Techniques & Countermeasures

  • CWE-252•Unchecked Return Value

    The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Affected Systems

  • linux•linux

    ≥ 80cd795630d6526ba729a089a435bf74a57af927, < aa2c274c279ff365a06a4cba263f04965895166e | ≥ 80cd795630d6526ba729a089a435bf74a57af927, < d5b0473707fa53b03a5db0256ce62b2874bddbc7 | ≥ 80cd795630d6526ba729a089a435bf74a57af927, < b95483d8d94b41fa31a84c1d86710b7907a37621 | ≥ 80cd795630d6526ba729a089a435bf74a57af927, < 5fdb55c1ac9585eb23bb2541d5819224429e103d | 27564d8d5d12d2ff197055346069c6bdbe08a8c2 | ≥ 4.20.1, < 4.21 | 5.0

  • linux•linux_kernel

    ≥ 5.0, < 5.4.150 | ≥ 5.5, < 5.10.70 | ≥ 5.11, < 5.14.9 | 4.20.1 | 5.15:rc1 | 5.15:rc2

References (4)