GHSA-G5G7-WFJ6-X845
Vulnerability from github – Published: 2026-11-03 12:31 – Updated: 2026-11-03 21:32In the Linux kernel, the following vulnerability has been resolved:
KEYS: Fix key_reject_and_link() race with keyring restriction
The restrict_link check in key_reject_and_link() is done before taking the keyring semaphore, racing with a concurrent keyring_restrict() that installs the restriction while holding the semaphore in write mode.
Move the check to after __key_link_lock(), so it is done under the semaphore, matching the pattern used in __key_create_or_update().
{
"affected": [],
"aliases": [
"CVE-2026-99245"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-11-03T12:17:30Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix key_reject_and_link() race with keyring restriction\n\nThe restrict_link check in key_reject_and_link() is done before taking\nthe keyring semaphore, racing with a concurrent keyring_restrict()\nthat installs the restriction while holding the semaphore in write\nmode.\n\nMove the check to after __key_link_lock(), so it is done under the\nsemaphore, matching the pattern used in __key_create_or_update().",
"id": "GHSA-g5g7-wfj6-x845",
"modified": "2026-11-03T21:32:06Z",
"published": "2026-11-03T12:31:49Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-99245"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/01835d3a3709be508ae5209f806640336c48e395"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0b157166e612b70f98a332b6c7be7eac6f8e9593"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/19dfc37c9deefa69dc805d01d35d1f2fd7902e33"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/23a9163cc40b4996ba1e20533b1210a1a0bee416"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/2c3d907dd15f4e30d4c35b9f7a7a5078de6a1b1f"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/5787887eba0f0979a8c86d03a8e891395d5c24ad"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6fc0c818b1cac66003e937c8a0d3bfb23fd3f130"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/72f367417a6aee56821d0b0114cfd2b080008b63"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c7956ec99ad0e173720d95de9fa788bb077809f2"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.