{"id":"CVE-2026-99245","revision":"42009f2eb35e487fbeebe46fb9335443","records":[{"revision":"42009f2eb35e487fbeebe46fb9335443","observedAt":"2026-11-03T12:57:16.958+00:00","statement":{"source":"cve-program","id":"CVE-2026-99245","aliases":[],"title":"KEYS: Fix key_reject_and_link() race with keyring restriction","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix key_reject_and_link() race with keyring restriction\n\nThe restrict_link check in key_reject_and_link() is done before taking\nthe keyring semaphore, racing with a concurrent keyring_restrict()\nthat installs the restriction while holding the semaphore in write\nmode.\n\nMove the check to after __key_link_lock(), so it is done under the\nsemaphore, matching the pattern used in __key_create_or_update().","state":0,"publishedAt":"2026-11-03T11:15:15.05+00:00","modifiedAt":"2026-11-03T11:15:43.589+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/key.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"c7956ec99ad0e173720d95de9fa788bb077809f2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"72f367417a6aee56821d0b0114cfd2b080008b63\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"19dfc37c9deefa69dc805d01d35d1f2fd7902e33\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"5787887eba0f0979a8c86d03a8e891395d5c24ad\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"01835d3a3709be508ae5209f806640336c48e395\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"6fc0c818b1cac66003e937c8a0d3bfb23fd3f130\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c\",\n                            \"lessThan\": \"23a9163cc40b4996ba1e20533b1210a1a0bee416\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/key.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.7\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.273\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.224\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.191\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.161\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.115\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.60\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.14\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3.1\",\n                            \"lessThanOrEqual\": \"7.3.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/c7956ec99ad0e173720d95de9fa788bb077809f2","https://git.kernel.org/stable/c/2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f","https://git.kernel.org/stable/c/72f367417a6aee56821d0b0114cfd2b080008b63","https://git.kernel.org/stable/c/19dfc37c9deefa69dc805d01d35d1f2fd7902e33","https://git.kernel.org/stable/c/5787887eba0f0979a8c86d03a8e891395d5c24ad","https://git.kernel.org/stable/c/01835d3a3709be508ae5209f806640336c48e395","https://git.kernel.org/stable/c/6fc0c818b1cac66003e937c8a0d3bfb23fd3f130","https://git.kernel.org/stable/c/23a9163cc40b4996ba1e20533b1210a1a0bee416"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99245","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-99245","identifiers":["CVE-2026-99245"]},"retained":false,"historicalAffected":[]}],"coverage":[]}