CVE-2026-64469

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the binder component. When a thread exits, the binder thread release() function iterates through its transaction stack to clear t->from and t->to proc. If a process dies simultaneously, it may attempt to free some of these transactions via binder free transaction(). If a transaction lacks an associated t->to proc, the t->to proc->inner lock is not acquired, creating a race condition. This allows transaction accesses in binder thread release() to occur after t->to proc has been cleared, potentially leading to a use-after-free error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.