AZL-112595: CVE-2026-99245 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved:
KEYS: Fix keyrejectandlink() race with keyring restriction
The restrictlink check in keyrejectandlink() is done before taking the keyring semaphore, racing with a concurrent keyringrestrict() that installs the restriction while holding the semaphore in write mode.
Move the check to after keylinklock(), so it is done under the semaphore, matching the pattern used in keycreateorupdate().
Affected Software
Event History
Frequently Asked Questions
What conditions are required to trigger this race?
The issue requires concurrent operations: key_reject_and_link() must perform its restriction check while another thread concurrently calls keyring_restrict() to install a keyring restriction. The race occurs because the original check happened before the keyring semaphore was acquired.
How can I determine whether my system includes the fix?
Check whether the kernel contains the change that moves the key_reject_and_link() restriction check to after __key_link_lock(), where it executes under the keyring semaphore. The affected package identified here is azure-linux/kernel 6.6.159.1-1.