The vulnerability in the Linux kernel rust_binder subsystem arises because freeze listeners are not forcibly cleared when the node reference count drops to zero if userspace fails to do so explicitly. As a result, freeze listeners remain in internal data structures despite the node reference being gone, potentially causing a memory leak through a reference count cycle. The fix involves removing the freeze listener during node removal to prevent this leak.

The primary impact is a potential memory leak in the Linux kernel due to lingering freeze listeners that create a reference count cycle. This could degrade system stability or performance over time but does not directly indicate code execution or privilege escalation.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch. Since no vendor advisory or patch link is provided here, users should monitor the Linux kernel release notes and update accordingly. Patch status is not yet confirmed in this data — check the vendor advisory for current remediation guidance.