{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-99024 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"CVE-2026-99024 is a vulnerability in Linux, published on 23 Oct 2026."},"fix_prompt":"Check this codebase for CVE-2026-99024 and fix it if it is affected.\n\nWhat it is: CVE-2026-99024 is a vulnerability in Linux, published on 23 Oct 2026. \nExploitation: There is no known exploitation of CVE-2026-99024 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-99024/ (Markdown: https://insights.sbomify.com/CVE-2026-99024/index.md)","id":"CVE-2026-99024","markdown":"https://insights.sbomify.com/CVE-2026-99024/index.md","name":"CVE-2026-99024","record":{"aliases":["AZL-110876","BELL-CVE-2026-99024","DEBIAN-CVE-2026-99024","GHSA-qp8f-jjvm-547w","UBUNTU-CVE-2026-99024"],"analysis":null,"analysis_generated_by":null,"assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\noptee: register TEE devices only once fully initialized\n\noptee_probe() called tee_device_register() on both the client and the\nsupplicant device before the rest of struct optee had been initialized.\n\ntee_device_register() calls cdev_device_add(), which does two things at\nonce: it creates /dev/tee0 and /dev/teepriv0, and it links the device\ninto the tee class so that class_find_device() can find it. From that\nmoment on the device is reachable both from user space via tee_open()\nand from kernel space via tee_client_open_context(). The only gate in\nteedev_open() is tee_device_get(), which merely checks that\nteedev-\u003edesc is non-NULL, which was already set by tee_device_alloc().\nTherefore, there is effectively no gate at all.\n\nA context opened in that window can run against a struct optee where\n\n  - optee-\u003ecall_queue.mutex is not initialized by optee_cq_init()\n  - optee-\u003esupp mutex and completions is not initialized by\n    optee_supp_init()\n  - optee-\u003erpmb_dev_mutex is not initialized yet,\n  - the message argument cache is not initialized by\n    optee_shm_arg_cache_init()\n  - optee-\u003ectx is still NULL\n\nAny open session or invoke during this window takes uninitialized\nmutexes and dereferences a NULL pointer.\n\nFix it by moving both tee_device_register() calls down to the point\nwhere all of struct optee is set up.\n\n[JW: adding fixes and cc]","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"optee: register TEE devices only once fully initialized","id":"CVE-2026-99024","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":null,"year":"2026"},"n_packages":0,"n_references":5,"next":{"headline":"openvswitch: fix soft lockup in the netlink flow dump","id":"CVE-2026-99025"},"packages":[],"prev":{"headline":"power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()","id":"CVE-2026-99023"},"products":["Linux"],"published":"2026-10-23","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-10-23","vendors":["Linux"]},"summary":null,"url":"https://insights.sbomify.com/CVE-2026-99024/"}