Description
In the Linux kernel, the following vulnerability has been resolved:
binder: signal epoll threads of self-work
In (e)poll mode, threads often depend on I/O events to determine when
data is ready for consumption. Within binder, a thread may initiate a
command via BINDER_WRITE_READ without a read buffer and then make use
of epoll_wait() or similar to consume any responses afterwards.
It is then crucial that epoll threads are signaled via wakeup when they
queue their own work. Otherwise, they risk waiting indefinitely for an
event leaving their work unhandled. What is worse, subsequent commands
won't trigger a wakeup either as the thread has pending work.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 2.6.29 | 4.19.307 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.7.7-1 | — |
| Debian 13 | linux | 6.7.7-1 | — |
| Debian 12 | linux | 6.1.82-1 | — |
| Debian 11 | linux | 5.10.216-1 | DSA-5681-1 |
| Debian 10 | linux | 4.19.316-1 | DLA-3840-1 |
| Debian 10 | linux-5.10 | 5.10.216-1~deb10u1 | DLA-3842-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1043.45 | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-106.116 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1061.67 | USN-6766-3 |
| Ubuntu 22.04 LTS | linux-aws-6.5 | 6.5.0-1023.23~22.04.1 | USN-6895-3 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1063.72 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-azure-6.5 | 6.5.0-1024.25~22.04.1 | USN-6895-2 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1063.72.1 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1059.67 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | 6.5.0-1024.26~22.04.1 | USN-6895-2 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1058.63 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1044.51 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | 6.5.0-44.44~22.04.1 | USN-6900-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1054.57 | USN-6766-2, USN-6766-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1057.63 | USN-6795-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | 6.5.0-44.44.1~22.04.1 | USN-6895-3 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1054.55 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | 6.5.0-1023.24 | USN-6895-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1026.26 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | — |
| Ubuntu 22.04 LTS | linux-oem-6.5 | 6.5.0-1027.28 | USN-6895-4 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1059.65 | USN-6766-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | 6.5.0-1026.26~22.04.1 | USN-6895-3 |
| Ubuntu 22.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | 6.5.0-1017.18~22.04.1 | USN-6895-3 |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1030.34 | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-181.201 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1124.134 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1061.67~20.04.1 | USN-6766-3 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1129.136 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1063.72~20.04.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1063.72~20.04.1.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1084.91 | USN-6767-2 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1128.137 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1059.67~20.04.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1091.95 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1044.51~20.04.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-106.116~20.04.1 | USN-6766-2, USN-6766-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1071.76 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1054.57~20.04.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1058.64~20.04.1 | USN-6828-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1036.37 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1112.119 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1027.27~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1123.132 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1059.65~20.04.1 | USN-6766-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1108.120 | USN-6767-1 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1057.61~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1043.47 | USN-6767-1 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2001.1 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1054.56 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1062.70 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1061.67+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1063.72+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-106.116+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1059.67+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1124.134+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1129.136+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1098.108 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1128.137+fips1 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1124.134~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1129.136~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1128.137~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-181.201~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1071.76~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1123.132~18.04.1 | USN-6767-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1108.120~18.04.1 | USN-6767-1 |
Advisories 18
- USN-6766-1 linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-6828-1 linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-6766-3 linux-aws, linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-6795-1 linux-intel-iotg vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-6766-2 linux-hwe-5.15, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-6895-3 linux-aws-6.5, linux-lowlatency-hwe-6.5, linux-oracle-6.5, linux-starfive-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6900-1 linux-hwe-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6895-2 linux-azure-6.5, linux-gcp-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6895-1 linux, linux-gcp, linux-nvidia-6.5, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6895-4 linux-oem-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6767-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- USN-6767-2 linux-bluefield vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
- DSA-5681-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3840-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3842-1 linux-5.10 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-25-226-15 Siemens SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 Siemens ProductCERT · Feb 24, 2026
- WID-SEC-2024-0478 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 29, 2025
References
- https://git.kernel.org/stable/c/dd64bb8329ce0ea27bc557e4160c2688835402ac
- https://git.kernel.org/stable/c/42beab162dcee1e691ee4934292d51581c29df61
- https://git.kernel.org/stable/c/a423042052ec2bdbf1e552e621e6a768922363cc
- https://git.kernel.org/stable/c/82722b453dc2f967b172603e389ee7dc1b3137cc
- https://git.kernel.org/stable/c/90e09c016d72b91e76de25f71c7b93d94cc3c769
- https://git.kernel.org/stable/c/a7ae586f6f6024f490b8546c8c84670f96bb9b68
- https://git.kernel.org/stable/c/93b372c39c40cbf179e56621e6bc48240943af69
- https://git.kernel.org/stable/c/97830f3c3088638ff90b20dfba2eb4d487bf14d7