Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/17 3:21 a.m.•33 views

CVE-2026-64468

CVE-2026-64468 — Linux kernel Binder binderfreetransaction process-lifetime use-after-free This repository contains, for the Linux kernel Binder use-after-free fixed by upstream commit f223d27a546c1e1f48d38fd67760e78f068fe8c4: binderchain64468.c — an unprivileged proof of concept that reaches the...

7.8CVSS6.7AI score0.00135EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/25 3:58 p.m.•29 views

SUSE CVE-2026-64468

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the t-lock. However, once the t-lock is dropped, the toproc can die in parallel. This leads to a use-after-free error when we attempt t...

5.5CVSS7.2AI score0.00135EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/07/25 8:51 a.m.•17 views

CVE-2026-64468 binder: fix UAF in binder_free_transaction()

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the t-lock. However, once the t-lock is dropped, the toproc can die in parallel. This leads to a use-after-free error when we attempt t...

7.8CVSS5.7AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•3 views

CVE-2026-64468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the t-lock. However, once the t-lock is dropped, the toproc can die in parallel. This leads to a use-after-free error when we attempt t...

7.8CVSS7.2AI score0.00135EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/13 12:00 a.m.•3 views

CVE-2019-2213: Concurrent Execution using Shared Resource with Improper Synchronization

In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.4CVSS7.4AI score0.00146EPSS
SaveExploits0References3
Rows per page
Query Builder