A Linux 6.18 kernel mechanism for inter-process communication called Binder, written in Rust, has addressed a vulnerability (CVE-2025-68260). The issue was caused by a race condition during operations in unsafe blocks that directly interacted with pointers to the previous and next list elements. When successfully exploited, the vulnerability in Binder results in a crash but does not lead to memory corruption.
Greg Kroah-Hartman, responsible for supporting the stable branch of the Linux kernel, commented on this vulnerability, stating that Rust is not a panacea for eliminating all security problems, but it does help protect against a certain class of vulnerabilities. Notably, in addition to the Binder vulnerability, information about 159 vulnerabilities in various Linux kernel components written in C was published yesterday.
Forrás: opennet.ru
