In the Linux kernel, the following vulnerability has been resolved:
security/keys: fix missed RCU read section on lookup
Nicholas Carlini reports that the keyring code calls assoc_array_find() in find_key_to_update() without holding the RCU read lock, while the assoc_array_gc() code really is designed around removing the node from the tree and then freeing it after an RCU grace-period.
The regular key handling doesn't see this because holding the keyring semaphore hides any lifetime issues, but the persistent key handling uses a different model.
Instead of extending the keyring locking, just do the simple RCU locking that the assoc_array was designed for.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade microvm-kernel6.18Upgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-develUpgrade kernel6.18-modules-extraUpgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18Upgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel-livepatch-6.18.35-68.127Upgrade python3-perf6.18 | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 23, 2026 | Jul 19, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-modules-extra-matchedUpgrade libperf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade libperfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-azure-6.8Upgrade linux-image-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-7.0Upgrade linux-image-intel-iotgUpgrade linux-image-azure-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-laptop-23.10Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1067-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-ibmUpgrade linux-image-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-7.0Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-6.8.0-1064-aws-fipsUpgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gke-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-139-genericUpgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-139-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1009-aws | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub