Technically, binder is still part of Linux, even if it's not enabled by default in many cases.
This "security vulnerability" is just a local DoS though. Annoying and problematic as it effectively bypasses controls over power on/off behaviour, but as far as I can tell from this report, no memory is leaked and no code execution can be achieved.
It's UB, it is not memory safe, so in theory, and often also in practice with this specific kind of bug, absolutely anything could happen, including code execution.
Greg Kroah-Hartman's comment is both wrong and perplexing.