CVE-2026-99245
KEYS: Fix key_reject_and_link() race with keyring restriction
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode. Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < c7956ec99ad0e173720d95de9fa788bb077809f2
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 72f367417a6aee56821d0b0114cfd2b080008b63
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 19dfc37c9deefa69dc805d01d35d1f2fd7902e33
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 5787887eba0f0979a8c86d03a8e891395d5c24ad
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 01835d3a3709be508ae5209f806640336c48e395
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 6fc0c818b1cac66003e937c8a0d3bfb23fd3f130
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 23a9163cc40b4996ba1e20533b1210a1a0bee416
- affected 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c – < 0b157166e612b70f98a332b6c7be7eac6f8e9593
- affected 4.7
- unaffected < 4.7
- unaffected 5.10.273 – ≤ 5.10.*
- unaffected 5.15.224 – ≤ 5.15.*
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.161 – ≤ 6.6.*
- unaffected 6.12.115 – ≤ 6.12.*
- unaffected 6.18.60 – ≤ 6.18.*
- unaffected 7.2.14 – ≤ 7.2.*
- unaffected 7.3.1 – ≤ 7.3.*
- unaffected 7.4-rc1 – ≤ *
References (9)
- https://git.kernel.org/stable/c/c7956ec99ad0e173720d95de9fa788bb077809f2 (opens in a new tab)
- https://git.kernel.org/stable/c/2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f (opens in a new tab)
- https://git.kernel.org/stable/c/72f367417a6aee56821d0b0114cfd2b080008b63 (opens in a new tab)
- https://git.kernel.org/stable/c/19dfc37c9deefa69dc805d01d35d1f2fd7902e33 (opens in a new tab)
- https://git.kernel.org/stable/c/5787887eba0f0979a8c86d03a8e891395d5c24ad (opens in a new tab)
- https://git.kernel.org/stable/c/01835d3a3709be508ae5209f806640336c48e395 (opens in a new tab)
- https://git.kernel.org/stable/c/6fc0c818b1cac66003e937c8a0d3bfb23fd3f130 (opens in a new tab)
- https://git.kernel.org/stable/c/23a9163cc40b4996ba1e20533b1210a1a0bee416 (opens in a new tab)
- https://git.kernel.org/stable/c/0b157166e612b70f98a332b6c7be7eac6f8e9593 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-99245)Record last updated .