CVE-2024-26606

binder: signal epoll threads of self-work

published February 26, 2024

CVSS
—
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

binder: signal epoll threads of self-work

In (e)poll mode, threads often depend on I/O events to determine when

data is ready for consumption. Within binder, a thread may initiate a

command via BINDER_WRITE_READ without a read buffer and then make use

of epoll_wait() or similar to consume any responses afterwards.

It is then crucial that epoll threads are signaled via wakeup when they

queue their own work. Otherwise, they risk waiting indefinitely for an

event leaving their work unhandled. What is worse, subsequent commands

won't trigger a wakeup either as the thread has pending work.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Published
2024-02-26T14:39Z
EPSS history
Timeline
  • 26 FEB 14:39Z
    binder: signal epoll threads of self-work
    cvelistv5