Keyring Vulnerability in Linux Kernel

CVE-2026-99223

What is CVE-2026-99223?

A vulnerability in the Linux kernel's keyring implementation allows an unprivileged user to embed keys with known descriptions. This leads to predictability in key ordering across kernel address space layouts. By exploiting this, attackers can potentially recover kernel memory addresses through the predictable indices generated during key retrieval. Recent updates improve the keyring's architecture by making keyring indices independent of kernel addresses and using a randomized hashing approach. This enhances the protection of sensitive information stored in keyrings and mitigates the risks associated with address-based key retrieval.

References