Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64466

In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze listeners before they drop the refcount on the node ref to zero, but there's nothing forcing that. Currently, in this scenario the freeze listener remains in the freeze_listeners rbtree and in the remote node's freeze listener list, even though the ref for which the listener is registered is gone. This could potentiall
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4a49a8e34d17f8b27ec3aca0a35ff593b60db330e6421174b9c6bf0e60d5b0f0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/android/binder/freeze.rs","drivers/android/binder/node.rs","drivers/android/binder/process.rs"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"91b27f8172cdbf265240104772fd042a461a7767","status":"affected","version":"eafedbc7c050c44744fbdf80bdf3315e860b7513","versionType":"git"},{"lessThan":"0644da3621ddd8e146280675a2a31d1e06634a1d","status":"affected","version":"eafedbc7c050c44744fbdf80bdf3315e860b7513","versionType":"git"},{"lessThan":"bc4a9828897871ff3…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/android/binder/freeze.rs","drivers/android/binder/node.rs","drivers/android/binder/process.rs"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.18"},{"lessThan":"6.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","sta…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/android/binder/freeze.rs","drivers/android/binder/node.rs","drivers/android/binder/process.rs"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"91b27f8172cdbf265240104772fd042a461a7767","status":"affected","version":"eafedbc7c050c44744fbdf80bdf3315e860b7513","versionType":"git"},{"lessThan":"0644da3621ddd8e146280675a2a31d1e06634a1d","status":"affected","version":"eafedbc7c050c44744fbdf80bdf3315e860b7513","versionType":"git"},{"lessThan":"bc4a9828897871ff3…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/android/binder/freeze.rs","drivers/android/binder/node.rs","drivers/android/binder/process.rs"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.18"},{"lessThan":"6.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","sta…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/0644da3621ddd8e146280675a2a31d1e06634a1d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/91b27f8172cdbf265240104772fd042a461a7767"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bc4a9828897871ff3e5a1f8a1d346decbf4ee95e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a806c25a4b590dc64257e8c0eb671864a61f8576b7e7f6ace33e2fb5424d0120 · sha256:5b7651cef9eb4c25… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer