PT-2026-28333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rust binder component related to handling binder death notifications. Specifically, the set notification done function may be called without...

PT-2026-8202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's rust binder component related to handling FDA fd array objects. Specifically, the issue arises when processing empty FDA objects with a length of zero...

PT-2025-55066

Уязвимость функции rust shrink free page модуля drivers/android/binder/page range.rs ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

PT-2026-4735

Name of the Vulnerable Software and Affected Versions gix-date affected versions not specified Description The gix date::parse::TimeBuf::as str function can produce strings with invalid, non-UTF8 characters. This breaks internal safety rules within the TimeBuf component, potentially causing...

aperture-shared (0.1.0), cafs (0.0.1) +65 more potentially affected by unknown CVE via capnp (>=0.0.1, <=0.23.2)

capnp CARGO version =0.0.1, =0.0.1, =0.2.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.6.0, =0.5.0, =0.0.2, =0.2.0-rc, =0.2.5-alpha.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0143...

Rust SSH DoS

The vulnerability of the Rust programming language’s Russh library for interacting with the SSH protocol is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

PT-2025-54613

The safe API functions constant::Reader::get and StructSchema::new rely on PointerReader::get root unchecked, which can cause undefined behavior UB by constructing arbitrary words or schemas. Reader::get rust pub fn get&self - Result::Reader // ... // UNSAFE: access words without validation...

CISA and Partners Release Update to Malware Analysis Report BRICKSTORM Backdoor

Today, the Cybersecurity and Infrastructure Security Agency CISA, National Security Agency, and Canadian Centre for Cyber Security released an update to the Malware Analysis Report BRICKSTORM Backdoor with indicators of compromise IOCs and detection signatures for additional BRICKSTORM samples...

AZL-74805 CVE-2025-68114 affecting package rust for versions less than 1.90.0-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...

AZL-74915 CVE-2025-67873 affecting package rust for versions less than 1.90.0-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make csdisasm/csdisasmiter memcpy more than 24 bytes into csinsn.bytes, causing a heap buffer overflow in the disassembly path. Commit...

SUSE CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

Linux Distros Unpatched Vulnerability : CVE-2025-68260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list //...

EUVD-2025-203744

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

UBUNTU-CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

CVE-2025-68260

CVE-2025-68260 is tied to a Linux kernel vulnerability in the Rust Binder, where an unsafe removal of a NodeDeath from a death_list can race with other threads. The root cause, per the description, is that Node::release currently moves items to a local stack list under a lock and then iterates th...

CVE-2025-68260 rust_binder: fix race condition on death_list

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

CVE-2025-68260 rust_binder: fix race condition on death_list

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

a2f (>=0.1.0, <=0.4.0), a2f-el (>=0.1.0, <=0.3.3) +4534 more potentially affected by unknown CVE via bincode (>=0.0.1, <=3.0.0)

bincode CARGO version =0.0.1, =0.1.0, =0.1.0, =0.10.0-dev0, =0.3.0, =0.1.0, =0.1.13, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - accumulator 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0141...