Linux Kernel Security Flaw in Trusted Keys Affects Key Instantiation

CVE-2026-99221

What is CVE-2026-99221?

A security vulnerability in the Linux kernel related to the management of trusted keys has been identified. This flaw occurs in the trusted_tpm_unseal() function, where it fails to handle the TPM unseal operation error effectively. Instead of halting after a failure, the function proceeds to execute pcrlock(). If pcrlock() executes successfully, it inadvertently overwrites the unseal error, resulting in a deceptive success in key instantiation. Correct handling demands an immediate return upon failure of the unseal operation to preserve the original error status, thus enhancing the security and integrity of key management operations.

References