CVE-2026-23400
kernel: rust_binder: call set_notification_done() without proc lock
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 29, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's rust_binder component. A local user could potentially trigger a deadlock condition. This occurs when the set_notification_done() function is called while the proc lock is already held and the current thread is not a 'looper' (a thread designed to handle specific kernel messages). This can lead to a system freeze, causing a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-833 · Deadlock