CVE-2026-98774
Received
Received - Intake
Memory Leak in Linux Kernel Rust Binder
Vulnerability report for CVE-2026-98774, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
rust_binder: cancel deferred work items in thread exit
If there are deferred work items on the thread todo list, then they are
not cleaned up in the Thread::release() method. Thus, update the code to
clean up the work items even if they are deferred.
This can happen if the thread dies while it has an active outgoing
transaction.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | eafedbc7c050c44744fbdf80bdf3315e860b7513 |
| Linux | Linux | eafedbc7c050c44744fbdf80bdf3315e860b7513 |
| Linux | Linux | eafedbc7c050c44744fbdf80bdf3315e860b7513 |
| Linux | Linux | 6.18 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
