Integer overflow in Linux kernel - CVE-2026-98222

Vulnerability details

The vulnerability allows a local user to write beyond an allocated kernel heap buffer.

The vulnerability exists due to integer overflow in encrypted_key_alloc() when calculating encrypted key payload lengths. A local user can supply key data whose combined lengths exceed the 16-bit allocation size limit to write beyond an allocated kernel heap buffer.

Affected software

How to mitigate CVE-2026-98222

External References

• https://git.kernel.org/stable/c/1e720f63dbafc093a8f5d519f05b67724993edd4
• https://git.kernel.org/stable/c/8697c431e297eb0d0ab13dda6bc172b48a34f05c
• https://git.kernel.org/stable/c/a1a98eca102b1cbbc37ff9eaa197ae4e6a3ea4b0
• https://git.kernel.org/stable/c/cca38f2102a4cd35eda8d48950df4817b4b24757

Related Security Bulletins

• Integer overflow in Linux kernel keys encrypted-keys
• Debian update for linux