CVE-2026-98778

A flaw was found in the Linux kernel's Android Binder driver. This vulnerability allows a local user to cause a Denial of Service (DoS) or application disruption by triggering the unexpected closure of unrelated file descriptors in a target process. When an asynchronous transaction update supersedes a pending transaction, the driver fails to set the correct cleanup flag for undelivered transactions, causing stale buffer data to be misinterpreted as active file descriptors.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.