CVE-2026-99245

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-99245
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99245.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99245
Downstream
Related
Published
2026-11-03T11:15:15Z
Modified
2026-11-10T17:27:01Z
Summary
KEYS: Fix key_reject_and_link() race with keyring restriction
Details

In the Linux kernel, the following vulnerability has been resolved:

KEYS: Fix key_reject_and_link() race with keyring restriction

The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode.

Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99245.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c
Fixed
c7956ec99ad0e173720d95de9fa788bb077809f2
Fixed
2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f
Fixed
72f367417a6aee56821d0b0114cfd2b080008b63
Fixed
19dfc37c9deefa69dc805d01d35d1f2fd7902e33
Fixed
5787887eba0f0979a8c86d03a8e891395d5c24ad
Fixed
01835d3a3709be508ae5209f806640336c48e395
Fixed
6fc0c818b1cac66003e937c8a0d3bfb23fd3f130
Fixed
23a9163cc40b4996ba1e20533b1210a1a0bee416
Fixed
0b157166e612b70f98a332b6c7be7eac6f8e9593

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99245.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.7.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.161
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.115
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.60
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.14
Type
ECOSYSTEM
Events
Introduced
7.3.0
Fixed
7.3.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99245.json"