CVE-2026-99226

The Linux kernel contains a vulnerability in the named keyring lookup function find_keyring_by_name(). The root cause is a use-after-free (confirmed by KASAN reports) where the function reads keyring->user->uid while holding keyring_name_lock. Because this lock only protects the keyring's n...

PT-2026-135515

In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named keyring lookup Named keyring lookup must keep the storage containing the owner UID alive through the namespace mapping check. find keyring by name reads keyring-user-uid under...