Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM unseal failure trusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the unseal error, causing key instantiation to succeed. Return immediately when unseal fails to preserve the original error.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund2 Nov 2026WID-SEC-2026-4302

  Linux Kernel: Multiple vulnerabilities allow an unspecified attack Translated from German

  Risk mediumCVE-2026-99237CVE-2026-99264CVE-2026-99220+50 more CVEs

[ References ]References

• git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb
• git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d
• git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935
• git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945
• git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62
• git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6
• git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d
• git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef