CVE-2026-64015

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the keyring code where the find key to update() function calls assoc array find() without holding the RCU (Read-Copy-Update) read lock. RCU is a synchronization mechanism that allows multiple readers to access data while it is being updated. This omission conflicts with the assoc array gc() logic, which removes nodes from the tree and frees them after an RCU grace-period. While regular key handling is protected by a keyring semaphore, persistent key handling follows a different model, making it susceptible to lifetime issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.