CVE-2024-26606
mediumpriority · track · 22OT risk · elevatedEPSS 0.002 · 15 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In (e)poll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDER_WRITE_READ without a read buffer and then make use of epoll_wait() or similar to consume any responses afterwards. It is then crucial that epoll threads are signaled via wakeup when they queue their own work. Otherwise, they risk waiting indefinitely for an event leaving their work unhandled. What is worse, subsequent commands won't trigger a wakeup either as the thread has pending work.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (63)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-613116SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.12025-08-12csaf · siemens_psirtDE
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2024-0478Linux Kernel: Mehrere SchwachstellenDeutsch2024-02-26csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder unbekannte Auswirkungen zu verursachen.
- ICSA-25-226-15Siemens SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (29)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-26606/cnnvd
- https://git.kernel.org/stable/c/42beab162dcee1e691ee4934292d51581c29df61cnnvd
- https://git.kernel.org/stable/c/82722b453dc2f967b172603e389ee7dc1b3137cccnnvd
- https://git.kernel.org/stable/c/90e09c016d72b91e76de25f71c7b93d94cc3c769cnnvd
- https://git.kernel.org/stable/c/93b372c39c40cbf179e56621e6bc48240943af69cnnvd
- https://git.kernel.org/stable/c/97830f3c3088638ff90b20dfba2eb4d487bf14d7cnnvd
- https://git.kernel.org/stable/c/a423042052ec2bdbf1e552e621e6a768922363cccnnvd
- https://git.kernel.org/stable/c/a7ae586f6f6024f490b8546c8c84670f96bb9b68cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan