CVE-2026-99245
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode. Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 3, 2026
First seenNov 4, 2026
How to fix
Update
- Linux Linuxc7956ec99ad0e173720d95de9fa788bb077809f2, 2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f, 72f367417a6aee56821d0b0114cfd2b080008b63, 19dfc37c9deefa69dc805d01d35d1f2fd7902e33, 5787887eba0f0979a8c86d03a8e891395d5c24ad, 01835d3a3709be508ae5209f806640336c48e395, 6fc0c818b1cac66003e937c8a0d3bfb23fd3f130, 23a9163cc40b4996ba1e20533b1210a1a0bee416, 0b157166e612b70f98a332b6c7be7eac6f8e9593 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < c7956ec99ad0e173720d95de9fa788bb077809f2, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 72f367417a6aee56821d0b0114cfd2b080008b63, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 19dfc37c9deefa69dc805d01d35d1f2fd7902e33, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 5787887eba0f0979a8c86d03a8e891395d5c24ad, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 01835d3a3709be508ae5209f806640336c48e395, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 6fc0c818b1cac66003e937c8a0d3bfb23fd3f130, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 23a9163cc40b4996ba1e20533b1210a1a0bee416, 5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c ≤ v < 0b157166e612b70f98a332b6c7be7eac6f8e9593, 4.7 | c7956ec99ad0e173720d95de9fa788bb077809f2, 2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f, 72f367417a6aee56821d0b0114cfd2b080008b63, 19dfc37c9deefa69dc805d01d35d1f2fd7902e33, 5787887eba0f0979a8c86d03a8e891395d5c24ad, 01835d3a3709be508ae5209f806640336c48e395, 6fc0c818b1cac66003e937c8a0d3bfb23fd3f130, 23a9163cc40b4996ba1e20533b1210a1a0bee416, 0b157166e612b70f98a332b6c7be7eac6f8e9593 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.