CVE-2021-47360: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes. Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.

Affected products

• Linux Linux Kernel: from 5.0, before 5.4.150 (fixed in 5.4.150); from 5.5, before 5.10.70 (fixed in 5.10.70); from 5.11, before 5.14.9 (fixed in 5.14.9); version 4.20.1 only; version 5.15 only

Published 2024-05-21. Last modified 2026-06-17.