CVE-2026-43433 is a high-severity vulnerability in the Linux kernel's rust_binder component. It involves a time-of-check to time-of-use (TOCTOU) issue where the kernel reads back values from an offsets array mapped into a target process's virtual memory area (vma). If the target process can write to its own vma, it could alter these values before the kernel reads them, potentially causing misinterpretation of the sender's intent. This flaw could allow a receiver process to escalate privileges into the sender under specific conditions. The vulnerability is mitigated by removing the TOCTOU read, and it is considered unexploitable without another Binder bug enabling write access to the vma.