CVE-2021-47360 - Vulnerability Details - OpenCVE

ReportizFlow

In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object cleanup may close 1 or more fds. The close operations are completed using the task work mechanism -- which means the thread needs to return to userspace or the file object may never be dereferenced -- which can lead to hung processes. Force the binder thread back to userspace if an fd is closed during BC_FREE_BUFFER handling.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d
https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e
https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621
https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7
https://lore.kernel.org/linux-cve-announce/2024052137-CVE-2021-47360-756a@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47360
https://www.cve.org/CVERecord?id=CVE-2021-47360

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:03:29.234Z

Updated: 2024-12-19T07:40:26.080Z

Reserved: 2024-05-21T14:58:30.809Z

Link: CVE-2021-47360

Vulnrichment

Updated: 2024-08-04T05:32:08.619Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:22.210

Modified: 2024-11-21T06:35:58.053

Link: CVE-2021-47360

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47360 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47360", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T14:58:30.809Z", "datePublished": "2024-05-21T15:03:29.234Z", "dateUpdated": "2024-12-19T07:40:26.080Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:40:26.080Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: make sure fd closes complete\n\nDuring BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object\ncleanup may close 1 or more fds. The close operations are\ncompleted using the task work mechanism -- which means the thread\nneeds to return to userspace or the file object may never be\ndereferenced -- which can lead to hung processes.\n\nForce the binder thread back to userspace if an fd is closed during\nBC_FREE_BUFFER handling."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/android/binder.c"], "versions": [{"version": "80cd795630d6526ba729a089a435bf74a57af927", "lessThan": "aa2c274c279ff365a06a4cba263f04965895166e", "status": "affected", "versionType": "git"}, {"version": "80cd795630d6526ba729a089a435bf74a57af927", "lessThan": "d5b0473707fa53b03a5db0256ce62b2874bddbc7", "status": "affected", "versionType": "git"}, {"version": "80cd795630d6526ba729a089a435bf74a57af927", "lessThan": "b95483d8d94b41fa31a84c1d86710b7907a37621", "status": "affected", "versionType": "git"}, {"version": "80cd795630d6526ba729a089a435bf74a57af927", "lessThan": "5fdb55c1ac9585eb23bb2541d5819224429e103d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/android/binder.c"], "versions": [{"version": "5.0", "status": "affected"}, {"version": "0", "lessThan": "5.0", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.150", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.70", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14.9", "lessThanOrEqual": "5.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e"}, {"url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7"}, {"url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621"}, {"url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d"}], "title": "binder: make sure fd closes complete", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-17T17:37:32.711122Z", "id": "CVE-2021-47360", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:38:46.035Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.619Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.619Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47360", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-17T17:37:32.711122Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:37:33.934Z"}}], "cna": {"title": "binder: make sure fd closes complete", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "80cd795630d6", "lessThan": "aa2c274c279f", "versionType": "git"}, {"status": "affected", "version": "80cd795630d6", "lessThan": "d5b0473707fa", "versionType": "git"}, {"status": "affected", "version": "80cd795630d6", "lessThan": "b95483d8d94b", "versionType": "git"}, {"status": "affected", "version": "80cd795630d6", "lessThan": "5fdb55c1ac95", "versionType": "git"}], "programFiles": ["drivers/android/binder.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.0"}, {"status": "unaffected", "version": "0", "lessThan": "5.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.150", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.70", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.14.9", "versionType": "semver", "lessThanOrEqual": "5.14.*"}, {"status": "unaffected", "version": "5.15", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/android/binder.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e"}, {"url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7"}, {"url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621"}, {"url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: make sure fd closes complete\n\nDuring BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object\ncleanup may close 1 or more fds. The close operations are\ncompleted using the task work mechanism -- which means the thread\nneeds to return to userspace or the file object may never be\ndereferenced -- which can lead to hung processes.\n\nForce the binder thread back to userspace if an fd is closed during\nBC_FREE_BUFFER handling."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:04:25.690Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47360", "state": "PUBLISHED", "dateUpdated": "2024-11-04T12:04:25.690Z", "dateReserved": "2024-05-21T14:58:30.809Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:03:29.234Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: make sure fd closes complete\n\nDuring BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object\ncleanup may close 1 or more fds. The close operations are\ncompleted using the task work mechanism -- which means the thread\nneeds to return to userspace or the file object may never be\ndereferenced -- which can lead to hung processes.\n\nForce the binder thread back to userspace if an fd is closed during\nBC_FREE_BUFFER handling."}, {"lang": "es", "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: carpeta: aseg\u00farese de que fd se cierre por completo Durante el procesamiento BC_FREE_BUFFER, la limpieza del objeto BINDER_TYPE_FDA puede cerrar 1 o m\u00e1s fds. Las operaciones de cierre se completan utilizando el mecanismo de trabajo de tareas, lo que significa que el hilo debe regresar al espacio de usuario o es posible que nunca se elimine la referencia al objeto de archivo, lo que puede llevar a procesos bloqueados. Fuerce el hilo de la carpeta a regresar al espacio de usuario si se cierra un fd durante el manejo de BC_FREE_BUFFER."}], "id": "CVE-2021-47360", "lastModified": "2024-11-21T06:35:58.053", "metrics": {}, "published": "2024-05-21T15:15:22.210", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}