CVE-2026-99225

A flaw was found in the Linux kernel. A local attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the system. This flaw occurs due to a race condition in the key management subsystem during process keyring searches, where revoking an authorization key concurrently leads to a NULL pointer dereference.

This vulnerability is rated as Moderate impact because exploitation is confined to local authenticated users and requires winning a tightly timed race condition. An unprivileged local user could leverage this timing window during process keyring lookups to trigger a kernel panic, resulting in a denial of service. The flaw affects system availability exclusively and does not allow privilege escalation or unauthorized data disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.