CVE-2026-99075

A flaw was found in the Linux kernel's Rust Binder driver. When a thread terminates while holding a pending reference count update for an inter-process communication node, the update is improperly dropped instead of being rescheduled. This desynchronizes internal states and prevents userspace from receiving cleanup notifications, preventing affected nodes from being released. A local user could exploit this flaw to cause a kernel memory leak, resulting in a Denial of Service (DoS) due to resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.