Improper Check for Unusual or Exceptional Conditions in Linux kernel - CVE-2026-98410

Vulnerability details

The vulnerability allows a local user to cause a denial of service through an unexpected system reset.

The vulnerability exists due to incomplete watchdog state checks in da9063_wdt_suspend() and da9063_wdt_resume() when handling system suspend and resume. A local user can trigger system suspend while the hardware watchdog is running but not marked active to cause a denial of service through an unexpected system reset.

The issue occurs when the driver leaves the watchdog running and userspace never opens the watchdog device. The software power-management path must be enabled.

Affected software

How to mitigate CVE-2026-98410

External References

• https://git.kernel.org/stable/c/1c42e39b0990371b9d76ae22c3f33eb6df341251
• https://git.kernel.org/stable/c/1db134d0d2a51a136296584854570e5e04adedb0
• https://git.kernel.org/stable/c/7cb575b71ab98194d2e040bded3a7281e089c5ed
• https://git.kernel.org/stable/c/95adc37f47cdf5a5285f7163b24243680af510be
• https://git.kernel.org/stable/c/960d1c85381bcaae866dd799b1c905ec5d39ebce
• https://git.kernel.org/stable/c/c30b419c7e6fbe31c48a44c828174168b732dc5b

Related Security Bulletins

• Improper Check for Unusual or Exceptional Conditions in Linux kernel watchdog driver
• Debian update for linux