PT-2026-28333 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-03-29 · CVE-2026-23400

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the rust binder component related to handling binder death notifications. Specifically, the set notification done() function may be called without acquiring the process lock, potentially leading to a deadlock. This can occur when a remote process dies and sends a BR DEAD BINDER message, triggering a sequence of events involving BC CLEAR DEATH NOTIFICATION and BC DEAD BINDER DONE commands. The issue arises because push work if looper() attempts to acquire the process lock while it is already held, resulting in a deadlock if the current thread is not a looper. The vulnerability is triggered by holding the proc lock during set notification done().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-23400

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23400.json · Exploit
• https://ubuntu.com/security/CVE-2026-23400 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23400 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23400 · Vendor Advisory
• https://git.kernel.org/stable/c/dd109e3442817bc03ad1f3ffd541092f8c428141 · Patch
• https://osv.dev/vulnerability/CVE-2026-23400 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23400 · Security Note
• https://git.kernel.org/stable/c/3be72099067d2cd4a0e089696f19780f75b2b88a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23400 · Vendor Advisory
• https://git.kernel.org/stable/c/2e303f0febb65a434040774b793ba8356698802b · Patch
• https://cve.org/CVERecord?id=CVE-2026-23400 · Security Note
• https://git.kernel.org/linus/2e303f0febb65a434040774b793ba8356698802b · Note
• https://twitter.com/CVEnew/status/2038250140151022053 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/VulmonFeeds/status/2038300350277456264 · Twitter Post