CVE Database›Document archive›CVE-2026-23400

CVE-2026-23400

kernel: rust_binder: call set_notification_done() without proc lock

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 29, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's rust_binder component. A local user could potentially trigger a deadlock condition. This occurs when the set_notification_done() function is called while the proc lock is already held and the current thread is not a 'looper' (a thread designed to handle specific kernel messages). This can lead to a system freeze, causing a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-833 · Deadlock