CVE-2026-99226 keys: Avoid the owner account dereference in named keyring lookup

🗓️ 02 Nov 2026 16:06:35Reported by LinuxType

Use-after-free in Linux kernel keys named keyring lookup via find_keyring_by_name().

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-99226	2 Nov 202616:33	–	circl
CVE	CVE-2026-99226	2 Nov 202616:06	–	cve
Debian CVE	CVE-2026-99226	3 Nov 202600:38	–	debiancve
EUVD	EUVD-2026-115268	2 Nov 202616:06	–	euvd
NVD	CVE-2026-99226	2 Nov 202616:17	–	nvd
osv_azl	AZL-112556 CVE-2026-99226 affecting package kernel 6.6.159.1-1	2 Nov 202616:17	–	osv_azl
osv_debian	DEBIAN-CVE-2026-99226	2 Nov 202616:17	–	osv_debian
Positive Technologies	PT-2026-135515	2 Nov 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-99226: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named…	2 Nov 202600:00	–	rapid7

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/keys/keyring.c"
    ],
    "versions": [
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "77249d4b1bb5ad43552b7023c4a0978937aa7a56",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "0b865fa477d94ac96c26848aab1fd176397de3f6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "6763329f673d261641c79212abf773af77b2c922",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "aa03c8fb4334f14d218020f7431debf2b7766865",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "c9664f780f861dd9f11f120c7a03ed0993671ebb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "b0830a26e2c3008a6e21863126b4a0e68b2761cd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "5c6a9512887a6cc694d594d9c0b57c0841d215b5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2ea190d0a006ce5218baa6e798512652446a605a",
        "lessThan": "40b12b93ae4ab9e22c3d571e9b09fd08afad53f6",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/keys/keyring.c"
    ],
    "versions": [
      {
        "version": "2.6.30",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.30",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.273",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.224",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.191",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.161",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.115",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.60",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.14",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3.1",
        "lessThanOrEqual": "7.3.*",
        "status": "unaffected",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5c6a9512887a6cc694d594d9c0b57c0841d215b5
git	www.git.kernel.org/stable/c/c9664f780f861dd9f11f120c7a03ed0993671ebb
git	www.git.kernel.org/stable/c/0b865fa477d94ac96c26848aab1fd176397de3f6
git	www.git.kernel.org/stable/c/77249d4b1bb5ad43552b7023c4a0978937aa7a56
git	www.git.kernel.org/stable/c/aa03c8fb4334f14d218020f7431debf2b7766865
git	www.git.kernel.org/stable/c/b0830a26e2c3008a6e21863126b4a0e68b2761cd
git	www.git.kernel.org/stable/c/40b12b93ae4ab9e22c3d571e9b09fd08afad53f6
git	www.git.kernel.org/stable/c/6763329f673d261641c79212abf773af77b2c922

02 Nov 2026 16:06Current

EPSS0.00165