CVE-2016-9604: Linux Kernel

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.

Affected products

• Linux Linux Kernel: up to and including 4.11; version 4.11 only

Published 2018-07-11. Last modified 2026-06-17.