{"history":[{"alert":0,"cve":"CVE-2026-99221","id":23525,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00177, \"percentile\": 0.07344}"},{"alert":0,"cve":"CVE-2026-99221","id":21130,"kind":"epss","observed_at":1794392402,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00177, \"percentile\": 0.07322}"},{"alert":1,"cve":"CVE-2026-99221","id":20989,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"Linux\", \"programFiles\": [\"security/keys/trusted-keys/trusted_tpm1.c\"], \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"versions\": [{\"lessThan\": \"4876f09ce222e140a73aad950882b3605440c935\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"2d92a0f87c338a08367aff05edd1ade86da4ac8d\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"234d09bb3b3d84851d4b3246272addc30f3353eb\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"6e359d8cb8580b9874801dea930086effd4d9c62\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"e55d48f21f591a9fe80d26b5fbd1912ea725d9e6\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"63b19ec2863b2cb5279b746ecd3d6210b1a93945\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"ed697a5f667435bbb1cedbe5bd9f300de645047d\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}, {\"lessThan\": \"f92d0ccb05bf9089072cb067dda0dffd5394c4ef\", \"status\": \"affected\", \"version\": \"5d0682be318910e028bdf57c90a1695ffc34be37\", \"versionType\": \"git\"}]}, {\"defaultStatus\": \"affected\", \"product\": \"Linux\", \"programFiles\": [\"security/keys/trusted-keys/trusted_tpm1.c\"], \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.13\"}, {\"lessThan\": \"5.13\", \"status\": \"unaffected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"5.15.*\", \"status\": \"unaffected\", \"version\": \"5.15.224\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.1.*\", \"status\": \"unaffected\", \"version\": \"6.1.191\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.6.*\", \"status\": \"unaffected\", \"version\": \"6.6.161\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.12.*\", \"status\": \"unaffected\", \"version\": \"6.12.115\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.18.*\", \"status\": \"unaffected\", \"version\": \"6.18.60\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.2.*\", \"status\": \"unaffected\", \"version\": \"7.2.14\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.3.*\", \"status\": \"unaffected\", \"version\": \"7.3.1\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"*\", \"status\": \"unaffected\", \"version\": \"7.4-rc1\", \"versionType\": \"original_commit_for_fix\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.15.224\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.1.191\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.6.161\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.12.115\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.18.60\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.2.14\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.3.1\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.4-rc1\", \"versionStartIncluding\": \"5.13\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nkeys/trusted_keys: return immediately after TPM unseal failure\\n\\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\\ncausing key instantiation to succeed.\\n\\nReturn immediately when unseal fails to preserve the original error.\"}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-03T19:12:55.574Z\", \"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\"}, \"references\": [{\"url\": \"https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935\"}, {\"url\": \"https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d\"}, {\"url\": \"https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb\"}, {\"url\": \"https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62\"}, {\"url\": \"https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6\"}, {\"url\": \"https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945\"}, {\"url\": \"https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d\"}, {\"url\": \"https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef\"}], \"title\": \"keys/trusted_keys: return immediately after TPM unseal failure\", \"x_generator\": {\"engine\": \"bippy-1.2.0\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"assignerShortName\": \"Linux\", \"cveId\": \"CVE-2026-99221\", \"datePublished\": \"2026-11-02T16:06:32.409Z\", \"dateReserved\": \"2026-09-25T10:25:14.401Z\", \"dateUpdated\": \"2026-11-03T19:12:55.574Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm1.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4876f09ce222e140a73aad950882b3605440c935","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"2d92a0f87c338a08367aff05edd1ade86da4ac8d","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"234d09bb3b3d84851d4b3246272addc30f3353eb","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"6e359d8cb8580b9874801dea930086effd4d9c62","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"63b19ec2863b2cb5279b746ecd3d6210b1a93945","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"ed697a5f667435bbb1cedbe5bd9f300de645047d","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"f92d0ccb05bf9089072cb067dda0dffd5394c4ef","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm1.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.224","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.191","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.161","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"},{"lessThanOrEqual":"7.3.*","status":"unaffected","version":"7.3.1","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.4-rc1","versionType":"original_commit_for_fix"}]}],"cna":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm1.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4876f09ce222e140a73aad950882b3605440c935","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"2d92a0f87c338a08367aff05edd1ade86da4ac8d","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"234d09bb3b3d84851d4b3246272addc30f3353eb","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"6e359d8cb8580b9874801dea930086effd4d9c62","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"63b19ec2863b2cb5279b746ecd3d6210b1a93945","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"ed697a5f667435bbb1cedbe5bd9f300de645047d","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"},{"lessThan":"f92d0ccb05bf9089072cb067dda0dffd5394c4ef","status":"affected","version":"5d0682be318910e028bdf57c90a1695ffc34be37","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm1.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.224","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.191","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.161","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"},{"lessThanOrEqual":"7.3.*","status":"unaffected","version":"7.3.1","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.4-rc1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.224","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.191","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.161","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.115","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.60","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.14","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.1","versionStartIncluding":"5.13","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.4-rc1","versionStartIncluding":"5.13","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nkeys/trusted_keys: return immediately after TPM unseal failure\n\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\ncausing key instantiation to succeed.\n\nReturn immediately when unseal fails to preserve the original error."}],"providerMetadata":{"dateUpdated":"2026-11-03T19:12:55.574Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935"},{"url":"https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d"},{"url":"https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb"},{"url":"https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62"},{"url":"https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6"},{"url":"https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945"},{"url":"https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d"},{"url":"https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef"}],"title":"keys/trusted_keys: return immediately after TPM unseal failure","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-99221","datePublished":"2026-11-02T16:06:32.409Z","dateReserved":"2026-09-25T10:25:14.401Z","dateUpdated":"2026-11-03T19:12:55.574Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-99221","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nkeys/trusted_keys: return immediately after TPM unseal failure\n\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\ncausing key instantiation to succeed.\n\nReturn immediately when unseal fails to preserve the original error.","epss":{"date":"2026-11-12","epss":0.00177,"percentile":0.07344},"epss_checked":1794522003,"first_seen":1794378631,"kev":null,"kev_checked":1794522003,"products":"Linux Linux","references":["https://git.kernel.org/stable/c/4876f09ce222e140a73aad950882b3605440c935","https://git.kernel.org/stable/c/2d92a0f87c338a08367aff05edd1ade86da4ac8d","https://git.kernel.org/stable/c/234d09bb3b3d84851d4b3246272addc30f3353eb","https://git.kernel.org/stable/c/6e359d8cb8580b9874801dea930086effd4d9c62","https://git.kernel.org/stable/c/e55d48f21f591a9fe80d26b5fbd1912ea725d9e6","https://git.kernel.org/stable/c/63b19ec2863b2cb5279b746ecd3d6210b1a93945","https://git.kernel.org/stable/c/ed697a5f667435bbb1cedbe5bd9f300de645047d","https://git.kernel.org/stable/c/f92d0ccb05bf9089072cb067dda0dffd5394c4ef"],"score":null,"solutions":"","state":"PUBLISHED","title":"keys/trusted_keys: return immediately after TPM unseal failure","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/","id":375,"publisher":"BleepingComputer","title":"Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day"}]}