In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred work items in thread exit If there are deferred… (CVE-2026-98774)

The vulnerability in the Linux kernel rust_binder subsystem involved improper cleanup of deferred work items on a thread's todo list during thread exit. Specifically, if a thread died while it had an active outgoing transaction, the deferred work items were not canceled or cleaned up in the Thread::release() method, potentially leading to resource management issues. The fix updates the code to ensure these deferred work items are properly canceled even if they are deferred at thread exit.

The impact relates to potential resource leaks or inconsistent state within the kernel's rust_binder thread management due to deferred work items not being cleaned up on thread termination. No direct exploitation or active attacks are reported. The vulnerability could affect kernel stability or behavior under certain conditions involving thread termination with active transactions.

A fix has been implemented in the Linux kernel to address this issue by canceling deferred work items in the thread exit process. Users should apply the official kernel updates that include this fix. Since this is a kernel-level fix, upgrading to a patched kernel version is the recommended remediation.