CVE-2024-26606

2024-02-2600:00:00

ubuntu.com

linux kernel

binder vulnerability

epoll threads

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: binder:
signal epoll threads of self-work In (e)poll mode, threads often depend on
I/O events to determine when data is ready for consumption. Within binder,
a thread may initiate a command via BINDER_WRITE_READ without a read buffer
and then make use of epoll_wait() or similar to consume any responses
afterwards. It is then crucial that epoll threads are signaled via wakeup
when they queue their own work. Otherwise, they risk waiting indefinitely
for an event leaving their work unhandled. What is worse, subsequent
commands won’t trigger a wakeup either as the thread has pending work.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-181.201UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-106.116UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-44.44UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1124.134UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1061.67UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1061.67~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1124.134~18.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< 6.5.0-1023.23~22.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1129.136UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1063.72UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-181.201	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-106.116	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-44.44	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1124.134	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1061.67	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1061.67~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1124.134~18.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< 6.5.0-1023.23~22.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1129.136	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1063.72	UNKNOWN