CVE-2026-63823

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel during the handling of request key auth payloads. The problem occurs during a concurrency scenario involving the request key() function and the KEYCTL INSTANTIATE IOV operation. Specifically, a race condition can occur where a helper completes and frees the request key auth (rka) payload and destroys the authentication key while another process is still attempting to use rka->target key after waking up from a page fault (#PF), leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.