CVE-2026-23184

A flaw was found in the Linux kernel's binder component. This vulnerability, a Use-After-Free (UAF), occurs when oneway transactions are sent to a frozen target. Although these transactions return an error, they are still processed, allowing the transaction data to be prematurely freed. A local attacker could exploit this timing issue to access freed memory, potentially leading to privilege escalation or arbitrary code execution within the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.