{"cve":"CVE-2021-47360","nvd":{"published":"2024-05-21T15:15:22.210","modified":"2026-06-17T04:17:17.480","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: make sure fd closes complete\n\nDuring BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object\ncleanup may close 1 or more fds. The close operations are\ncompleted using the task work mechanism -- which means the thread\nneeds to return to userspace or the file object may never be\ndereferenced -- which can lead to hung processes.\n\nForce the binder thread back to userspace if an fd is closed during\nBC_FREE_BUFFER handling.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":["CWE-252"],"references":["https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d","https://git.kernel.org/stable/c/aa2c274c279ff365a06a4cba263f04965895166e","https://git.kernel.org/stable/c/b95483d8d94b41fa31a84c1d86710b7907a37621","https://git.kernel.org/stable/c/d5b0473707fa53b03a5db0256ce62b2874bddbc7","https://git.kernel.org/stable/c/5fdb55c1ac9585eb23bb2541d5819224429e103d"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T21:50:30.954589733+00:00"},"epss":{"cve":"CVE-2021-47360","score":0.0025,"percentile":0.1636,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}