CVE-2026-98774: rust_binder: cancel deferred work items in thread exit
In the Linux kernel, the following vulnerability has been resolved:
rustbinder: cancel deferred work items in thread exit
If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release() method. Thus, update the code to clean up the work items even if they are deferred.
This can happen if the thread dies while it has an active outgoing transaction.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Update rust_binder thread-exit handling to cancel and clean up deferred work items, including when the thread dies with an active outgoing transaction.