{"id":"CVE-2026-99221","revision":"f4cfa8802389412f9525aa22f86d016b","records":[{"revision":"f4cfa8802389412f9525aa22f86d016b","observedAt":"2026-11-03T21:57:16.832+00:00","statement":{"source":"cve-program","id":"CVE-2026-99221","aliases":[],"title":"keys/trusted_keys: return immediately after TPM unseal failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nkeys/trusted_keys: return immediately after TPM unseal failure\n\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\ncausing key instantiation to succeed.\n\nReturn immediately when unseal fails to preserve the original error.","state":0,"publishedAt":"2026-11-02T16:06:32.409+00:00","modifiedAt":"2026-11-03T19:12:55.574+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/trusted-keys/trusted_tpm1.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"4876f09ce222e140a73aad950882b3605440c935\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"2d92a0f87c338a08367aff05edd1ade86da4ac8d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"234d09bb3b3d84851d4b3246272addc30f3353eb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"6e359d8cb8580b9874801dea930086effd4d9c62\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"e55d48f21f591a9fe80d26b5fbd1912ea725d9e6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"63b19ec2863b2cb5279b746ecd3d6210b1a93945\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"ed697a5f667435bbb1cedbe5bd9f300de645047d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\",\n                            \"lessThan\": \"f92d0ccb05bf9089072cb067dda0dffd5394c4ef\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/trusted-keys/trusted_tpm1.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.224\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.191\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.161\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.115\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.60\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.14\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3.1\",\n                            \"lessThanOrEqual\": \"7.3.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.4-rc1\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935","https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d","https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb","https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62","https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945","https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d","https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99221","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-99221","identifiers":["CVE-2026-99221"]},"retained":false,"historicalAffected":[]}],"coverage":[]}