Vulnerability in Linux Kernel Affecting Keyring Management

CVE-2026-99226

What is CVE-2026-99226?

The vulnerability in the Linux kernel involves a flaw in named keyring management, where improper handling during namespace mapping checks can lead to access of freed memory. This occurs when the named keyring lookup does not properly maintain the owner UID through concurrent operations, specifically during a privileged ownership transfer. An attacker could exploit this flaw to manipulate key ownership, potentially leading to unauthorized access to sensitive information stored in keyrings. The issue has been addressed by ensuring that the keyring’s UID is maintained correctly during these operations, effectively mitigating the risk posed by this vulnerability.

References