---
id: CVE-2026-98774
title: 'rust_binder: cancel deferred work items in thread exit'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  rust_binder: cancel deferred work items in thread exit

  If there are deferred work items on the thread todo list, then they are
  not cleaned up in the Thread::release() …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 <
    d54df2de22f9ac5b660d0ec898986f805e97c096
  - >-
    Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 <
    98dc9fababd1b7fb1a88b8362183baa5779c2394
  - >-
    Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 <
    62479b6e5df82cbdf3c4145130928f233fae78fb
  - Linux 6.18
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:48:09.884Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98774'
references:
  - url: 'https://git.kernel.org/stable/c/d54df2de22f9ac5b660d0ec898986f805e97c096'
  - url: 'https://git.kernel.org/stable/c/98dc9fababd1b7fb1a88b8362183baa5779c2394'
  - url: 'https://git.kernel.org/stable/c/62479b6e5df82cbdf3c4145130928f233fae78fb'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.492Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

rust_binder: cancel deferred work items in thread exit

If there are deferred work items on the thread todo list, then they are
not cleaned up in the Thread::release() method. Thus, update the code to
clean up the work items even if they are deferred.

This can happen if the thread dies while it has an active outgoing
transaction.

## Affected

- `Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 < d54df2de22f9ac5b660d0ec898986f805e97c096`
- `Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 < 98dc9fababd1b7fb1a88b8362183baa5779c2394`
- `Linux >= eafedbc7c050c44744fbdf80bdf3315e860b7513 < 62479b6e5df82cbdf3c4145130928f233fae78fb`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.