CVE-2026-74566

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the keys subsystem where keyring get key chunk() and keyring diff objects() disagree on byte order and bit position. Specifically, keyring get key chunk() loads description bytes into the index chunk low address first, while keyring diff objects() numbers the first differing bit from the low end and folds the absolute byte index into the level without removing the inline-prefix offset. This discrepancy allows crafted descriptions to collide into a single node within the keyring array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.