CVE-2026-64466
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
rust_binder: clear freeze listener on node removal<br />
<br />
Generally userspace is supposed to explicitly clear freeze listeners<br />
before they drop the refcount on the node ref to zero, but there&#39;s<br />
nothing forcing that. Currently, in this scenario the freeze listener<br />
remains in the freeze_listeners rbtree and in the remote node&#39;s freeze<br />
listener list, even though the ref for which the listener is registered<br />
is gone. This could potentially lead to a memory leak due to a refcount<br />
cycle. Thus, remove the freeze listener in this scenario.



