CVE-2026-93266arm64: RSI: fix field-spanning write warning in attestation token init
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to ®s.a1 makes FORTIFY treat the destination as the single a1 field, resulting in a field-spanning write warning. [1] Overlay the SMCCC register structure with an RSI-specific argument layout and copy the challenge into an explicit 64-byte array. This keeps the existing a1-a8 argument encoding while giving the copy a correctly sized destination object. [1] memcpy: detected field-spanning write (size 64) of single field "®s.a1" at ./arch/arm64/include/asm/rsi_cmds.h:119 (size 8) WARNING: ./arch/arm64/include/asm/rsi_cmds.h:119 at rsi_attestation_token_init+0xdc/0xf8 [arm_cca_guest], CPU#0: cat/3314
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 24, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b880a80011f56880f32bde47fc6af313359f926b before e505092cb200d430d5b8d8d3e926d45f29474ba3; from b880a80011f56880f32bde47fc6af313359f926b before d29a8ee271da17b5e32d7a76a9c78d43f66447ca; from b880a80011f56880f32bde47fc6af313359f926b before 221049874b6a78c7d87bc826581b0695cd338e2b | CNA record |
References
- https://git.kernel.org/stable/c/e505092cb200d430d5b8d8d3e926d45f29474ba3
- https://git.kernel.org/stable/c/d29a8ee271da17b5e32d7a76a9c78d43f66447ca
- https://git.kernel.org/stable/c/221049874b6a78c7d87bc826581b0695cd338e2b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.