Key Management Flaw in Linux Kernel Affects Keyctl Operations

CVE-2026-99222

What is CVE-2026-99222?

A significant vulnerability exists in the Linux kernel's handling of key management, particularly affecting the keyctl_read_key function. This flaw arises when keyctl_read_key attempts to check the read method against key types without properly maintaining semaphore locks. The flaw allows for the potential reading of a key while its associated module is being unloaded, which could lead to unauthorized access to sensitive data. The vulnerability has been addressed by restructuring the method checks to ensure they occur within a properly managed critical section, preventing premature type unregistration and enhancing the overall security of key handling within the kernel.

References