CVE-2026-98774

Received Received - Intake

Memory Leak in Linux Kernel Rust Binder

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred. This can happen if the thread dies while it has an active outgoing transaction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98774

EUVD

EUVD-2026-103859

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	eafedbc7c050c44744fbdf80bdf3315e860b7513
Linux	Linux	eafedbc7c050c44744fbdf80bdf3315e860b7513
Linux	Linux	eafedbc7c050c44744fbdf80bdf3315e860b7513
Linux	Linux	6.18

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper cleanup of deferred work items in the rust_binder module. When a thread exits while having an active outgoing transaction, deferred work items on its todo list are not properly cleaned up in the Thread::release() method. This can lead to resource leaks or potential system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's rust_binder implementation and involves improper cleanup of deferred work items during thread exit. Detection requires checking kernel logs for binder-related errors or crashes, particularly when threads terminate during active transactions. No direct commands are provided in the context, but monitoring for kernel panics or binder subsystem failures may indicate exploitation.

Impact Analysis

If exploited, this could cause system instability or crashes due to unmanaged resources. It may also lead to performance degradation or unexpected behavior in applications relying on the binder IPC mechanism.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the rust_binder deferred work item cleanup issue. Monitor system logs for binder-related errors or crashes indicating active outgoing transactions during thread exits.

Hi! I’m here to help you understand CVE-2026-98774. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70