CVE-2026-99221

A flaw was found in the Linux kernel's trusted keys subsystem. During the process of unsealing a key using a Trusted Platform Module (TPM), the kernel fails to abort if the unseal operation fails, allowing a subsequent locking operation to overwrite the failure status with a success code. A local user could exploit this flaw to instantiate trusted keys despite unsealing failures, potentially bypassing security controls.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.