CVE-2026-98774

rust_binder: cancel deferred work items in thread exit

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rust_binder: cancel deferred work items in thread exit

If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred.

This can happen if the thread dies while it has an active outgoing transaction.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eafedbc7c050c44744fbdf80bdf3315e860b7513 to before d54df2de22f9ac5b660d0ec898986f805e97c096Affected
  • eafedbc7c050c44744fbdf80bdf3315e860b7513 to before 98dc9fababd1b7fb1a88b8362183baa5779c2394Affected
  • eafedbc7c050c44744fbdf80bdf3315e860b7513 to before 62479b6e5df82cbdf3c4145130928f233fae78fbAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.