CVE-2026-98774 rust_binder: cancel deferred work items in thread exit
A memory corruption vulnerability in the Linux kernel's Rust binder allows local attackers to cause denial of service or escalate privileges via deferred work items.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98774?
CVE-2026-98774 is a memory corruption vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
rust_binder: cancel deferred work items in thread exit
If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred.
This can happen if the thread dies while it has an active outgoing transaction.
Which versions are affected by CVE-2026-98774?
How do I fix CVE-2026-98774?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-98774 being exploited?
There is no known exploitation of CVE-2026-98774 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-98774, DEBIAN-CVE-2026-98774, GHSA-3hmp-3v2x-8x2w, UBUNTU-CVE-2026-98774.