CVE-2026-99221

not scored yet · published 2026-11-02

In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unseal failure trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed. Return immediately when unseal fails to preserve the original error.

Source: NVD CVE-2026-99221

References

• https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb
• https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d
• https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935
• https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945
• https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62
• https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6
• https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d
• https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.