Multiple Field Spanning Write Issues in Linux Kernel Affecting ARM64 Architecture

CVE-2026-93266

What is CVE-2026-93266?

The vulnerability in the Linux kernel affects the ARM64 architecture, specifically when managing argument registers for the attestation token initialization. An issue arises during the copying process, leading to a field-spanning write warning due to incorrect destination size handling. The vulnerability necessitates modifications in the SMCCC register structure to ensure that the data copying process uses a correctly sized destination buffer, thereby maintaining the integrity of data handling within the system.

References