CVE-2026-99221 - Vulnerability Details

- keys/trusted_keys: return immediately after TPM unseal failure

Description

In the Linux kernel, the following vulnerability has been resolved:

keys/trusted_keys: return immediately after TPM unseal failure

trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation
fails. If pcrlock() succeeds, its return value overwrites the unseal error,
causing key instantiation to succeed.

Return immediately when unseal fails to preserve the original error.

Published: 2026-11-02

Score: n/a

EPSS: n/a

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< 4876f09ce222e140a73aad950882b3605440c935
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< 2d92a0f87c338a08367aff05edd1ade86da4ac8d
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< 234d09bb3b3d84851d4b3246272addc30f3353eb
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< 6e359d8cb8580b9874801dea930086effd4d9c62
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< e55d48f21f591a9fe80d26b5fbd1912ea725d9e6
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< 63b19ec2863b2cb5279b746ecd3d6210b1a93945
`5d0682be318910e028bdf57c90a1695ffc34be37`	affected	< ed697a5f667435bbb1cedbe5bd9f300de645047d

Linux

affected

Version	Status	Constraints
`5.13`	affected	—
`0`	unaffected	< 5.13
`5.15.224`	unaffected	≤ 5.15.*
`6.1.191`	unaffected	≤ 6.1.*
`6.6.161`	unaffected	≤ 6.6.*
`6.12.115`	unaffected	≤ 6.12.*
`6.18.60`	unaffected	≤ 6.18.*
`7.2.14`	unaffected	≤ 7.2.*
`7.3.1`	unaffected	≤ 7.3.*

No data.

Vendor Product Confidence Versions

Linux

100%

Version	Status	Scheme	Platform
`[5d0682be318910e028bdf57c90a1695ffc34be37,4876f09ce222e140a73aad950882b3605440c935)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,2d92a0f87c338a08367aff05edd1ade86da4ac8d)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,234d09bb3b3d84851d4b3246272addc30f3353eb)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,6e359d8cb8580b9874801dea930086effd4d9c62)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,e55d48f21f591a9fe80d26b5fbd1912ea725d9e6)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,63b19ec2863b2cb5279b746ecd3d6210b1a93945)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,ed697a5f667435bbb1cedbe5bd9f300de645047d)`	affected	code_commit	—

Linux

100%

Version	Status	Scheme	Platform
`5.13`	affected	generic	—
`[0,5.13)`	unaffected	generic	—
`[5.15.224,6.0.0)`	unaffected	semver	—
`[6.1.191,6.2.0)`	unaffected	semver	—
`[6.6.161,6.7.0)`	unaffected	semver	—
`[6.12.115,6.13.0)`	unaffected	semver	—
`[6.18.60,6.19.0)`	unaffected	semver	—
`[7.2.14,7.3.0)`	unaffected	semver	—
`[7.3.1,7.4.0)`	unaffected	semver	—

Linux

Linux Kernel

100%

Version	Status	Scheme	Platform
`[5d0682be318910e028bdf57c90a1695ffc34be37,4876f09ce222e140a73aad950882b3605440c935)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,2d92a0f87c338a08367aff05edd1ade86da4ac8d)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,234d09bb3b3d84851d4b3246272addc30f3353eb)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,6e359d8cb8580b9874801dea930086effd4d9c62)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,e55d48f21f591a9fe80d26b5fbd1912ea725d9e6)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,63b19ec2863b2cb5279b746ecd3d6210b1a93945)`	affected	code_commit	—
`[5d0682be318910e028bdf57c90a1695ffc34be37,ed697a5f667435bbb1cedbe5bd9f300de645047d)`	affected	code_commit	—

Linux

Linux Kernel

100%

Version	Status	Scheme	Platform
`5.13`	affected	generic	—
`[0,5.13)`	unaffected	generic	—
`[5.15.224,6.0.0)`	unaffected	semver	—
`[6.1.191,6.2.0)`	unaffected	semver	—
`[6.6.161,6.7.0)`	unaffected	semver	—
`[6.12.115,6.13.0)`	unaffected	semver	—
`[6.18.60,6.19.0)`	unaffected	semver	—
`[7.2.14,7.3.0)`	unaffected	semver	—
`[7.3.1,7.4.0)`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb
https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d
https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935
https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945
https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62
https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6
https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d

History

Mon, 02 Nov 2026 18:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux linux
Vendors & Products		Linux linux

Mon, 02 Nov 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unseal failure trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed. Return immediately when unseal fails to preserve the original error.
Title		keys/trusted_keys: return immediately after TPM unseal failure
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935 https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945 https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62 https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6 https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d

Subscriptions

Linux Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-11-02T16:06:32.409Z

Updated: 2026-11-02T16:06:32.409Z

Reserved: 2026-09-25T10:25:14.401Z

Link: CVE-2026-99221

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-11-02T16:17:46.293

Modified: 2026-11-02T16:17:46.293

Link: CVE-2026-99221

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-11-02T17:45:11Z

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object