CVE-2026-99245
Received Received - Intake

Race Condition in Linux Kernel KEYS Subsystem

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode. Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-99245
EUVD
EUVD-2026-115775

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Linux Linux 4.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the key management system. The issue occurs in the key_reject_and_link() function where a check for keyring restrictions happens before acquiring the keyring semaphore. This creates a race with a concurrent keyring_restrict() operation that installs restrictions while holding the semaphore, potentially allowing unauthorized key operations.

Impact Analysis

This vulnerability could allow an attacker to bypass keyring restrictions and perform unauthorized operations on the system. If exploited, it might lead to privilege escalation or unauthorized access to sensitive data protected by kernel keyrings.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the key_reject_and_link() race condition in the KEYS subsystem.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99245. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...