CVE-2026-99224

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the kernel's key management system. A race condition occurs when a request to describe a key is processed simultaneously with the unloading of a networking module. Specifically, the keyctl describe key() function fails to properly pin the module providing the key type. If a module is unloaded after the first formatting pass of kasprintf() but before the second, the system may attempt to read the key type name from released module storage, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.