CVE-2026-98774

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred. This can happen if the thread dies while it has an active outgoing transaction.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-18 16:17:31.340000

Last modified

2026-10-19 10:19:41.507000

View original CVE JSON

{
  "id": "CVE-2026-98774",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-18T16:17:31.340",
  "lastModified": "2026-10-19T10:19:41.507",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrust_binder: cancel deferred work items in thread exit\n\nIf there are deferred work items on the thread todo list, then they are\nnot cleaned up in the Thread::release() method. Thus, update the code to\nclean up the work items even if they are deferred.\n\nThis can happen if the thread dies while it has an active outgoing\ntransaction."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/android/binder/thread.rs"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "eafedbc7c050c44744fbdf80bdf3315e860b7513",
              "lessThan": "d54df2de22f9ac5b660d0ec898986f805e97c096",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "eafedbc7c050c44744fbdf80bdf3315e860b7513",
              "lessThan": "98dc9fababd1b7fb1a88b8362183baa5779c2394",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "eafedbc7c050c44744fbdf80bdf3315e860b7513",
              "lessThan": "62479b6e5df82cbdf3c4145130928f233fae78fb",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/android/binder/thread.rs"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.18",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.18",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.56",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.10",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/62479b6e5df82cbdf3c4145130928f233fae78fb",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/98dc9fababd1b7fb1a88b8362183baa5779c2394",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d54df2de22f9ac5b660d0ec898986f805e97c096",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}