CVE-2026-99223 is a vulnerability in the Linux kernel's keyring implementation where keyring indexes leak kernel address information. This flaw allows an unprivileged user to predict the order of keys in a keyring and recover the kernel image address, potentially defeating Kernel Address Space Layout Randomization (KASLR). The issue is resolved by removing kernel addresses from the index and using non-address-dependent identifiers and hashing. The fix preserves existing key comparison, permissions, and userspace data formats while eliminating address-dependent ordering.