The vulnerability originates in the Linux kernel’s keyring implementation. An unprivileged process can create keys with known descriptions, causing the kernel to arrange them in a deterministic order that depends on kernel addresses. By inserting a small number of such keys, the attacker can enumerate the KASLR slide and recover the linear address of the kernel image, effectively leaking sensitive memory addresses. This information exposure allows further exploitation, such as bypassing memory protection or facilitating privilege escalation. The weakness is a form of information disclosure that relies on the predictable hashing of type, domain, and description tuples.

All Linux kernel installations are affected, regardless of distribution or architecture. The vulnerability has been fixed in later kernel releases; however, the exact version range that contains the flaw is not specified in the data provided.

No CVSS score or EPSS data is available for this entry, and it is not listed in the CISA KEV catalog, which suggests that the vulnerability may not yet be actively exploited in the wild. The attack vector is inferred to be local, requiring an unprivileged process to insert keys, as described in the kernel commit logs. The impact is limited to information disclosure, but the disclosed addresses could enable subsequent attacks if combined with other kernel vulnerabilities. Given the absence of published exploitation statistics, the immediate risk is moderate, yet organizations should not delay remediation due to the potential for future chaining.