Out-of-Bounds Read Vulnerability in Linux Kernel Affects Keyring Functionality

CVE-2026-74567

What is CVE-2026-74567?

A critical security flaw has been identified in the Linux kernel's keyring functionality, where the read pointer in the keyring_get_key_chunk() function is improperly advanced. This can lead to reading memory beyond allocated bounds, specifically when a crafted pair of same-type keys causes index collisions. As a result, it opens the door to potential unauthorized access to sensitive information, highlighting the necessity of prompt patch deployment to mitigate risks associated with this vulnerability.

References