CVE-2026-93053

A flaw was found in the Linux kernel's speakup component. A local attacker with root privileges could exploit a vulnerability in the keyhelp module by overriding function names in sysfs. This manipulation could cause an out-of-bounds write in the letter_offsets array, potentially leading to system instability or unexpected behavior.

This vulnerability is rated as a Moderate impact because exploitation requires local administrative privileges to write to sysfs attributes, limiting the risk primarily to a system crash rather than unauthorized privilege escalation. In standard Red Hat deployments, the speakup accessibility driver is not loaded by default, requiring manual intervention to enable. Furthermore, older enterprise platform releases do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.