All vulnerabilities
CVE-2026-98774

Linux: rust_binder: cancel deferred work items in thread exit

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in98dc9fababd1b7fb1a88b8362183baa5779c2394Also 62479b6e5df82cbdf3c4145130928f233fae78fbCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 98dc9fababd1b7fb1a88b8362183baa5779c2394LinuxCVE List
  • 62479b6e5df82cbdf3c4145130928f233fae78fbLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

rust_binder: cancel deferred work items in thread exit

If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred.

This can happen if the thread dies while it has an active outgoing transaction.

Text from CVE List

Affected versions 8

  • Linuxaffected: eafedbc7c050c44744fbdf80bdf3315e860b7513 before d54df2de22f9ac5b660d0ec898986f805e97c096CVE List
  • Linuxaffected: eafedbc7c050c44744fbdf80bdf3315e860b7513 before 98dc9fababd1b7fb1a88b8362183baa5779c2394CVE List
  • Linuxaffected: eafedbc7c050c44744fbdf80bdf3315e860b7513 before 62479b6e5df82cbdf3c4145130928f233fae78fbCVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3