The Linux kernel contained a concurrency vulnerability in the security/keys subsystem. Specifically, the keyring code called assoc_array_find() in find_key_to_update() without holding the required RCU read lock. While regular key handling was protected by a keyring semaphore, persistent key handling was not, exposing potential lifetime issues due to improper synchronization. The fix involved implementing the correct RCU read locking to ensure safe access and prevent use-after-free or similar concurrency problems.

This vulnerability could lead to unsafe memory access or race conditions in the kernel keyring subsystem, potentially causing system instability or security issues related to key management. However, no known exploits are reported in the wild, and the impact is limited to the kernel's key handling internals.

A fix has been implemented in the Linux kernel to add the missing RCU read lock in the keyring code. Users should update to a kernel version that includes this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply updates accordingly.