SB20260925127 - Improper Check for Unusual or Exceptional Conditions in Linux kernel arm64 kernel

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-93254)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to trigger a kernel warning.

The vulnerability exists due to improper interrupt-state handling in arm64_exit_to_kernel_mode() when exiting to kernel mode with interrupts disabled and the GIC_PRIO_PSR_I_SET bit set in the PMR. A local user can trigger the affected kernel exit path to trigger a kernel warning.

The warning occurs when CONFIG_ARM64_DEBUG_PRIORITY_MASKING is enabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/39aebe0e89469c2904e60b1e977e0d4dbf33326b
• https://git.kernel.org/stable/c/49a61174186bed25d439ff37400c7ce5e3603e73