The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoVulnerability
CVE-2026-23194: In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-23194
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.1%
Summary
CVE-2026-23194 is a flaw in the Linux kernel's rust_binder driver, in how it handles FDA (file descriptor array) objects of length zero. The code used skip == 0 to mark a pointer fixup, but 0 is also the correct skip length for an empty FDA. When such an FDA sits at the end of a buffer, the driver attempts an 8-byte write out of bounds, which is caught and returned to userspace as EINVAL.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.