Authorization Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2026-99225

What is CVE-2026-99225?

A vulnerability has been identified in the Linux kernel that affects process keyring authorization. When a request-key helper is utilized, it may improperly handle authorization credentials during keyring searches, leading to potential kernel oopses. This occurs due to a race condition where authorization keys can be invalidated while descendant processes attempt to use them. The improper handling of payload pointers can lead to NULL dereferences, causing significant stability issues within the kernel. System administrators should ensure they stay updated with patches to mitigate potential exploits.

References