CVE-2026-74567

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the keyring get key chunk() function. For description-level chunks, the function advances the read pointer past the inline prefix but only performs bounds-checking on the prefix itself. This allows a sufficiently long key description to be read beyond its kmemdup(desc, desc len + 1) allocation. This condition can be triggered by an unprivileged user via add key(2) by providing a crafted pair of same-type keys with colliding index hashes, leading to a slab-out-of-bounds read, as reported by KASAN (Kernel Address Sanitizer, a dynamic memory error detector for the Linux kernel).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.