CVE-2024-26606

    Dashboard / Vulnerabilities / CVE-2024-26606

    CVE-2024-26606

    Published: 26 Feb 2024Last Modified: 12 Aug 2026

    Summary: binder: signal epoll threads of self-work

    Details: In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In (e)poll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDER_WRITE_READ without a read buffer and then make use of epoll_wait() or similar to consume any responses afterwards. It is then crucial that epoll threads are signaled via wakeup when they queue their own work. Otherwise, they risk waiting indefinitely for an event leaving their work unhandled. What is worse, subsequent commands won't trigger a wakeup either as the thread has pending work.

    References: https://git.kernel.org/stable/c/42beab162dcee1e691ee4934292d51581c29df61, https://git.kernel.org/stable/c/82722b453dc2f967b172603e389ee7dc1b3137cc, https://git.kernel.org/stable/c/90e09c016d72b91e76de25f71c7b93d94cc3c769, https://git.kernel.org/stable/c/93b372c39c40cbf179e56621e6bc48240943af69, https://git.kernel.org/stable/c/97830f3c3088638ff90b20dfba2eb4d487bf14d7, https://git.kernel.org/stable/c/a423042052ec2bdbf1e552e621e6a768922363cc, https://git.kernel.org/stable/c/a7ae586f6f6024f490b8546c8c84670f96bb9b68, https://git.kernel.org/stable/c/dd64bb8329ce0ea27bc557e4160c2688835402ac, https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html, https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html, https://lists.fedoraproject.org/archives/list/[email protected]/message/EZOU3745CWCDZ7EMKMXB2OEEIB5Q3IWM/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26606.json, https://nvd.nist.gov/vuln/detail/CVE-2024-26606, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 457b9a6f09f011ebcb9b52cc203a6331a6fc2de7
    Fixed -dd64bb8329ce0ea27bc557e4160c2688835402ac

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-26606 | CVE-DB