CVE-2026-98774

Source
https://cve.org/CVERecord?id=CVE-2026-98774
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98774.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98774
Downstream
Published
2026-10-18T15:48:09Z
Modified
2026-10-20T02:30:55Z
Summary
rust_binder: cancel deferred work items in thread exit
Details

In the Linux kernel, the following vulnerability has been resolved:

rust_binder: cancel deferred work items in thread exit

If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred.

This can happen if the thread dies while it has an active outgoing transaction.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98774.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eafedbc7c050c44744fbdf80bdf3315e860b7513
Fixed
d54df2de22f9ac5b660d0ec898986f805e97c096
Fixed
98dc9fababd1b7fb1a88b8362183baa5779c2394
Fixed
62479b6e5df82cbdf3c4145130928f233fae78fb

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98774.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98774.json"