CVE-2026-93266
kernel: arm64: RSI: fix field-spanning write warning in attestation token init
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · September 28, 2026
Description
A flaw was found in the Linux kernel's ARM64 Realm Services Interface (RSI) component. When copying attestation challenge data into register structures, the kernel performs a write operation across adjacent structure fields, triggering a memory safety warning from the fortified memory copying mechanism. A local user can trigger this flaw during attestation token initialization, potentially causing a system crash and Denial of Service (DoS) on systems configured to halt on kernel warnings.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-787 · Out-of-bounds Write