Description: binder: fix race between mmput() and do_exit()
References:
Notes:
 carnil> Introduced in 457b9a6f09f0 ("Staging: android: add binder driver"). Vulnerable
 carnil> versions: 2.6.29-rc1.
Bugs:
upstream: released (6.8-rc1) [9a9ab0d963621d9d12199df9817e66982582d5a5]
6.7-upstream-stable: released (6.7.2) [77d210e8db4d61d43b2d16df66b1ec46fad2ee01]
6.6-upstream-stable: released (6.6.14) [67f16bf2cc1698fd50e01ee8a2becc5a8e6d3a3e]
6.1-upstream-stable: released (6.1.75) [6696f76c32ff67fec26823fc2df46498e70d9bf3]
5.10-upstream-stable: released (5.10.209) [7e7a0d86542b0ea903006d3f42f33c4f7ead6918]
4.19-upstream-stable: released (4.19.306) [95b1d336b0642198b56836b89908d07b9a0c9608]
sid: released (6.6.15-1)
6.1-bookworm-security: released (6.1.76-1)
5.10-bullseye-security: released (5.10.209-1)
4.19-buster-security: needed