{"id":"ASB-A-468680876","details":"In binder_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-468680876","CVE-2026-23184"],"modified":"2026-11-02T16:56:25.008374525Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/1c8fffa12a81f62411312825521d63a81d1ca92e"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2026-11-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"spl":"2026-11-05","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/1c8fffa12a81f62411312825521d63a81d1ca92e","target":{"function":"binder_transaction","truncated_path_level":1,"file":"drivers/android/binder.c"},"deprecated":false,"digest":{"function_hash":"292721611640359062750241658260354774319","length":20596},"id":"ASB-A-468680876-07b3fdcc"},{"source":"https://android.googlesource.com/kernel/common/+/1c8fffa12a81f62411312825521d63a81d1ca92e","target":{"file":"drivers/android/binder.c","truncated_path_level":1},"deprecated":false,"digest":{"line_hashes":["102186528262440842446174308854054506424","215444748068280150020433832815844783837","106050918330106691462352632683372805711","186882895859409720762755226513863923791","73459573619979287906696054572438982782","297235728462984358161341747057319566352","47602951939085402005588031262182968075","236444568068537989923478614733525644605","240308107299844078423223490035898257366","44357881221828095460173770385715437388","272631207531283576997540003003697175815"],"threshold":0.9},"id":"ASB-A-468680876-5072e65f","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/kernel/common/+/1c8fffa12a81f62411312825521d63a81d1ca92e"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-468680876.json"}}],"schema_version":"1.9.2"}