CVE-2026-99245
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode. Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-11-03 12:17:30.877000
Last modified
2026-11-03 12:17:30.877000
View original CVE JSON
{
"id": "CVE-2026-99245",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-11-03T12:17:30.877",
"lastModified": "2026-11-03T12:17:30.877",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix key_reject_and_link() race with keyring restriction\n\nThe restrict_link check in key_reject_and_link() is done before taking\nthe keyring semaphore, racing with a concurrent keyring_restrict()\nthat installs the restriction while holding the semaphore in write\nmode.\n\nMove the check to after __key_link_lock(), so it is done under the\nsemaphore, matching the pattern used in __key_create_or_update()."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"security/keys/key.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "c7956ec99ad0e173720d95de9fa788bb077809f2",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "72f367417a6aee56821d0b0114cfd2b080008b63",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "19dfc37c9deefa69dc805d01d35d1f2fd7902e33",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "5787887eba0f0979a8c86d03a8e891395d5c24ad",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "01835d3a3709be508ae5209f806640336c48e395",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "6fc0c818b1cac66003e937c8a0d3bfb23fd3f130",
"versionType": "git",
"status": "affected"
},
{
"version": "5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c",
"lessThan": "23a9163cc40b4996ba1e20533b1210a1a0bee416",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"security/keys/key.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "4.7",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.7",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.273",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.224",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.191",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.161",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.115",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.60",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.14",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3.1",
"lessThanOrEqual": "7.3.*",
"versionType": "semver",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/01835d3a3709be508ae5209f806640336c48e395",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/19dfc37c9deefa69dc805d01d35d1f2fd7902e33",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/23a9163cc40b4996ba1e20533b1210a1a0bee416",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5787887eba0f0979a8c86d03a8e891395d5c24ad",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6fc0c818b1cac66003e937c8a0d3bfb23fd3f130",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/72f367417a6aee56821d0b0114cfd2b080008b63",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c7956ec99ad0e173720d95de9fa788bb077809f2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}