In the Linux kernel, the following vulnerability has been resolved:
security/keys: fix missed RCU read section on lookup
Nicholas Carlini reports that the keyring code calls assoc_array_find() in find_key_to_update() without holding the RCU read lock, while the assoc_array_gc() code really is designed around removing the node from the tree and then freeing it after an RCU grace-period.
The regular key handling doesn't see this because holding the keyring semaphore hides any lifetime issues, but the persistent key handling uses a different model.
Instead of extending the keyring locking, just do the simple RCU locking that the assoc_array was designed for.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade kernel6.18-develUpgrade perf6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade python3-perf6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel-livepatch-6.18.35-68.127Upgrade python3-perf6.18-debuginfoUpgrade perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18 | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 23, 2026 | Jul 19, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-modules-extra-matchedUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade libperf-debuginfoUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade rvUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-modules | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1064-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-7.0Upgrade linux-image-6.8.0-139-genericUpgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-bosUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-7.0Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-6.8.0-139-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-nvidia-tegraUpgrade linux-image-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1067-azureUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-7.0Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub