The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write     warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to     s.a1 makes FORTIFY treat the destination as the single a1 field, resulting in a field-spanning write     warning. [1] Overlay the SMCCC register structure with an RSI-specific argument layout and copy the     challenge into an explicit 64-byte array. This keeps the existing a1-a8 argument encoding while giving the     copy a correctly sized destination object. [1] memcpy: detected field-spanning write (size 64) of single     field s.a1 at ./arch/arm64/include/asm/rsi_cmds.h:119 (size 8) WARNING:
    ./arch/arm64/include/asm/rsi_cmds.h:119 at rsi_attestation_token_init+0xdc/0xf8 [arm_cca_guest], CPU#0:
    cat/3314 (CVE-2026-93266)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-93266

high Nessus Plugin ID 350203

Version 1.3

Version 1.1

Version 1.3 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.1 Sep 25, 2026, 6:49 PM New Plugin Feed: 202609251849