Byte Order Vulnerability in Linux Kernel Affects Keyring Handling

CVE-2026-74566

What is CVE-2026-74566?

A vulnerability exists in the Linux kernel relating to keyring management. The issue stems from a disagreement in byte order between the functions keyring_get_key_chunk() and keyring_diff_objects(). This discrepancy can lead to incorrect positioning of keys in a keyring's in-memory structure, allowing crafted descriptions to collide into a single node within the keyring. Despite this, the operations for adding, searching, and reading non-colliding keys remain unaffected, preserving the general functionality of keyring operations.

References