A vulnerability in the Linux kernel's asymmetric_keys subsystem allows unprivileged users to trigger a NULL pointer dereference, causing a kernel panic. This occurs because the PKCS#8 parser leaves the asym_key_ids payload empty, and the kernel code dereferences this slot unconditionally when processing PKCS#8 keys with key_or_keyring restrictions. The flaw has been resolved by rejecting asymmetric restriction keys without key IDs, as PKCS#8 private keys cannot validly identify trust anchors.