diff --git a/security/keys/request_key.c b/security/keys/request_key.c
index 52af4ffdead2..fc5bab9bf5e6 100644
--- a/security/keys/request_key.c
+++ b/security/keys/request_key.c
@@ -481,6 +481,9 @@ static struct key *construct_key_and_link(struct key_type *type,
 
 	kenter("");
 
+	if (type == &key_type_keyring)
+		return ERR_PTR(-EPERM);
+
 	ret = construct_get_dest_keyring(&dest_keyring);
 	if (ret)
 		goto error;