diff --git a/security/keys/keyring.c b/security/keys/keyring.c
index 14abfe765b7e789765474c24070aaa738ca6dc70..700409d815a944b12f1f4ee2d39e4d58051ebfb5 100644
--- a/security/keys/keyring.c
+++ b/security/keys/keyring.c
@@ -772,7 +772,9 @@ static bool search_nested_keyrings(struct key *keyring,
 	for (; slot < ASSOC_ARRAY_FAN_OUT; slot++) {
 		ptr = READ_ONCE(node->slots[slot]);
 
-		if (assoc_array_ptr_is_meta(ptr) && node->back_pointer)
+		if (assoc_array_ptr_is_meta(ptr) &&
+		    (node->back_pointer ||
+		     assoc_array_ptr_is_shortcut(ptr)))
 			goto descend_to_node;
 
 		if (!keyring_ptr_is_keyring(ptr))