{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/linux-kernel-all-versions-prior-to-fix/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-99224"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Linux kernel (all versions prior to fix)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Linux"],"content_html":"\u003cp\u003eCVE-2026-99224 is a vulnerability in the Linux kernel key management subsystem. Specifically, the function keyctl_describe_key fails to properly pin the memory associated with a key type's name during the formatting process. If a module providing a key type is unloaded concurrently with a key description request, the kernel may attempt to access memory from the released module, leading to a use-after-free condition and a potential kernel panic or page fault.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this race condition can cause a kernel-mode page fault. In a local context, this can lead to a system crash (Denial of Service). While the provided information focuses on the crash, the access to freed memory storage suggests potential for further memory corruption depending on system state.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eIdentify systems running Linux kernel versions susceptible to this race condition.\u003c/li\u003e\n\u003cli\u003eMonitor kernel logs (dmesg) for page fault errors related to memory addresses within loaded modules, particularly involving key management operations.\u003c/li\u003e\n\u003cli\u003ePatch the Linux kernel to the version containing the fix for CVE-2026-99224 once the stable release becomes available from your distribution vendor.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-05T15:58:01Z","date_published":"2026-11-05T15:58:01Z","id":"https://feed.craftedsignal.io/briefs/2026-11-linux-kernel-key-uaf/","summary":"A race condition in the Linux kernel key management subsystem allows a use-after-free vulnerability during key description retrieval, potentially resulting in kernel-mode page faults.","title":"Linux Kernel: Use-after-free in keyctl_describe_key (CVE-2026-99224)","url":"https://feed.craftedsignal.io/briefs/2026-11-linux-kernel-key-uaf/"}],"language":"en","title":"CraftedSignal Threat Feed - Linux Kernel (All Versions Prior to Fix)","version":"https://jsonfeed.org/version/1.1"}