CVE-2026-43434

kernel: rust_binder: check ownership before using vma

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · October 20, 2026

Description

A flaw was found in the rust_binder component of the Linux kernel. When installing or zapping pages, rust_binder may incorrectly look up and use a Virtual Memory Area (VMA) if it has been closed and replaced at the same address. This can allow a local attacker to write to normally read-only binder pages, which, when combined with another vulnerability, could potentially lead to privilege escalation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition