PT-2024-11357 · Linux+2 · Linux Kernel+2

Todd Kjos · Published 2021-08-30 · Updated 2025-05-12 · CVE-2021-47360

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's binder mechanism. During BC FREE BUFFER processing, the BINDER TYPE FDA object cleanup may close one or more file descriptors. The close operations are completed using the task work mechanism, which requires the thread to return to userspace. If this does not happen, the file object may never be dereferenced, leading to hung processes. The binder thread is forced back to userspace if a file descriptor is closed during BC FREE BUFFER handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unchecked Return Value

Weakness Enumeration

CWE-252

CWE-459

Related Identifiers

BDU:2025-14372

CVE-2021-47360

OPENSUSE-SU-2024_2189-1

SUSE-SU-2024:2008-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2190-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1249

• https://osv.dev/vulnerability/SUSE-SU-2024:2019-1 · Vendor Advisory
• https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e · Patch
• https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7 · Patch
• https://bdu.fstec.ru/vul/2025-14372 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621 · Patch
• https://ubuntu.com/security/CVE-2021-47360 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47360 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47360 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2008-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47360 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2189-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47360 · Security Note