CVE-2026-99223

A flaw was found in the Linux kernel. A local unprivileged attacker can exploit this flaw to cause an information disclosure by inserting keys with known descriptions into a keyring and observing the order in which they are retrieved. Because internal keyring indexing relies on memory addresses, analyzing this predictable traversal order allows the attacker to deduce the kernel memory layout and bypass Kernel Address Space Layout Randomization (KASLR).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.