{"id":"CVE-2026-99221","aliases":[],"cve":{"records":[{"id":"CVE-2026-99221","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-25T10:25:14.401Z","published":"2026-11-02T16:06:32.409Z","modified":"2026-11-03T19:12:55.574Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-11-03T19:12:55.574Z"}],"references":[{"url":"https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"5.15.224"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.6.161"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.12.115"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.18.60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"7.2.14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"7.3.1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"7.4-rc1"}]}]}]}],"prioritization":[]},"title":"keys/trusted_keys: return immediately after TPM unseal failure","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nkeys/trusted_keys: return immediately after TPM unseal failure\n\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\ncausing key instantiation to succeed.\n\nReturn immediately when unseal fails to preserve the original error.","score":null,"severity":"unknown","published":"2026-11-02T16:06:32.409Z","modified":"2026-11-03T19:12:55.574Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"4876f09ce222e140a73aad950882b3605440c935","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"2d92a0f87c338a08367aff05edd1ade86da4ac8d","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"234d09bb3b3d84851d4b3246272addc30f3353eb","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"6e359d8cb8580b9874801dea930086effd4d9c62","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"63b19ec2863b2cb5279b746ecd3d6210b1a93945","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"ed697a5f667435bbb1cedbe5bd9f300de645047d","versionType":"git"},{"version":"5d0682be318910e028bdf57c90a1695ffc34be37","status":"affected","lessThan":"f92d0ccb05bf9089072cb067dda0dffd5394c4ef","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-99221"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"5.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.13","versionType":"semver"},{"version":"5.15.224","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.161","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.115","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.60","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.14","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3.1","status":"unaffected","lessThanOrEqual":"7.3.*","versionType":"semver"},{"version":"7.4-rc1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-99221"}],"remediation":[],"references":["https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935","https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d","https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb","https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62","https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945","https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d","https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef"],"sources":[{"name":"CVE","id":"CVE-2026-99221","modified":"2026-11-03T19:12:55.574Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-99221"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-11-03T19:50:13.029Z","kev":{"status":"not-listed","checkedAt":"2026-11-06T21:20:33.816Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-03T09:05:30.847Z","attemptedAt":"2026-11-03T09:05:30.847Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-03T09:05:30.847Z","attemptedAt":"2026-11-03T09:05:30.847Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-03T09:05:30.847Z","attemptedAt":"2026-11-03T09:05:30.847Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-03T09:05:30.847Z","attemptedAt":"2026-11-03T09:05:30.847Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-5mq3-jmpv-w7p5","url":"https://github.com/advisories/GHSA-5mq3-jmpv-w7p5","modified":"2026-11-02T18:32:31Z","checkedAt":"2026-11-03T09:05:30.847Z"},{"source":"NVD","id":"CVE-2026-99221","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99221","modified":"2026-11-02T16:17:46.293","checkedAt":"2026-11-03T09:05:30.847Z"},{"source":"ENISA EUVD","id":"EUVD-2026-115263","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115263","modified":"Nov 2, 2026, 4:06:32 PM","checkedAt":"2026-11-03T09:05:30.847Z"}],"aiSummary":null}