CVE-2024-56555

A flaw was found in the Linux kernel's binder component. A race condition in the binder_add_freeze_work() function, caused by a temporary drop of a lock, allows binder_deferred_release() to modify internal data structures. This can lead to an out-of-bounds read, which a local attacker could exploit to potentially disclose sensitive information or cause a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.