A vulnerability in Binder, a core subsystem of the Linux kernel, written in Rust
The Binder inter-process communication mechanism, integrated into the Linux 6.18 kernel and written in Rust, has fixed a vulnerability (CVE-2025-68260). The issue is caused by a race condition during operations in unsafe blocks that directly handle pointers to the previous and next list elements. When successfully exploited, the vulnerability in Binder is limited to a crash and does not lead to memory corruption. Greg Kroah-Hartman […]
