Answer in brief
CVE-2026-99245 records a Unknown severity vulnerability in KEYS: Fix key_reject_and_link() race with keyring restriction. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <c7956ec99ad0e173720d95de9fa788bb077809f2 || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <72f367417a6aee56821d0b0114cfd2b080008b63 || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <19dfc37c9deefa69dc805d01d35d1f2fd7902e33 || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <5787887eba0f0979a8c86d03a8e891395d5c24ad || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <01835d3a3709be508ae5209f806640336c48e395 || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <6fc0c818b1cac66003e937c8a0d3bfb23fd3f130 || >=5ac7eace2d00eab5ae0e9fdee63e38aee6001f7c <23a9163cc40b4996ba1e20533b1210a1a0bee416 | c7956ec99ad0e173720d95de9fa788bb077809f2, 2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f, 72f367417a6aee56821d0b0114cfd2b080008b63, 19dfc37c9deefa69dc805d01d35d1f2fd7902e33, 5787887eba0f0979a8c86d03a8e891395d5c24ad, 01835d3a3709be508ae5209f806640336c48e395, 6fc0c818b1cac66003e937c8a0d3bfb23fd3f130, 23a9163cc40b4996ba1e20533b1210a1a0bee416 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
Nov 3, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 3, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 3, 2026
In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode. Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().
Quoted source text, attributed separately from HOL analysis.