CVE-2026-99245

A flaw was found in the Linux kernel. A local user could bypass keyring link restrictions due to a race condition in the kernel's key management subsystem. This issue occurs when the kernel checks link restrictions before acquiring the necessary lock during key linking operations, racing against concurrent restriction updates. An attacker can exploit this timing window to insert unauthorized keys into a restricted keyring, bypassing intended kernel security controls.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.