Log in Start free

Vulnerability · Published Nov 2, 2026 · Assigned by Linux

CVE-2026-99221keys/trusted_keys: return immediately after TPM unseal failure

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 92.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unseal failure trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed. Return immediately when unseal fails to preserve the original error.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-99221
Debian:13linux6.12.115-1DEBIAN-CVE-2026-99221
Debian:14linux7.2.14-1DEBIAN-CVE-2026-99221
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linuxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-awsno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-azureno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-gcpno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-oracleno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-raspino fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-realtimeno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99221
Ubuntu:26.10linux-riscvno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-99221
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-99221
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-99221

Affected products (as reported)

VendorProductVersions
Linux Linux 5d0682be318910e028bdf57c90a1695ffc34be37 – before 4876f09ce222e140a73aad950882b3605440c9355d0682be318910e028bdf57c90a1695ffc34be37 – before 2d92a0f87c338a08367aff05edd1ade86da4ac8d5d0682be318910e028bdf57c90a1695ffc34be37 – before 234d09bb3b3d84851d4b3246272addc30f3353eb5d0682be318910e028bdf57c90a1695ffc34be37 – before 6e359d8cb8580b9874801dea930086effd4d9c625d0682be318910e028bdf57c90a1695ffc34be37 – before e55d48f21f591a9fe80d26b5fbd1912ea725d9e65d0682be318910e028bdf57c90a1695ffc34be37 – before 63b19ec2863b2cb5279b746ecd3d6210b1a939455d0682be318910e028bdf57c90a1695ffc34be37 – before ed697a5f667435bbb1cedbe5bd9f300de645047d5d0682be318910e028bdf57c90a1695ffc34be37 – before f92d0ccb05bf9089072cb067dda0dffd5394c4ef
Linux Linux 5.13

References