CVE-2026-64467

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rust binder component where the Drop implementation for Allocation uses usize instead of u64 for the stride and per-entry read when cleaning up the offsets array. On 32-bit kernels, this causes the system to iterate through 8-byte entries in 4-byte steps, leading to a refcount over-decrement. This corrupts the binder reference accounting, which may result in the owner receiving a strong reference release notification (BR RELEASE) while references still exist. On 32-bit ARM architectures, this can trigger a refcount underflow failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.