CVE-2026-99221

Not scored yetLast modified Nov 3, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

keys/trusted_keys: return immediately after TPM unseal failure

trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed.

Return immediately when unseal fails to preserve the original error.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 3, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-99222In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type removal keyctl_read_kCVE-2026-99223In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel addresses KEYCTL_READCVE-2026-992247.0In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key keyctl_describe_keyCVE-2026-99225In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An aCVE-2026-99226In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named keyring lookup NameCVE-2026-992277.8In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the canCVE-2026-99228In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends work When a thread exiCVE-2026-99229In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list As long as IO_CHECKCVE-2026-99238.8Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a craftCVE-2026-99230In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in ->hash_node io_uring_cmd_del_CVE-2026-992317.8In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing ->head io_waitid_remoCVE-2026-99232In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultable syscall buffer
CVE-2026-99221: Unscored | Vulnix