CVE-2026-98410

Received Received - Intake

Watchdog Suspend Bypass in DA9063 Kernel Driver

Publication date: 2026-10-14

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be executed in da9063_wdt_suspend. In this case, the suspend callback is a no-op and the watchdog keeps counting during system suspend, leading to an unexpected system reset. Check WDOG_HW_RUNNING and wdd，can fix this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98410

EUVD

EUVD-2026-101059

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	a7ceca4398bc835c6ad29d10e1106de4cf0332e1
Linux	Linux	5.19

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability affects the Linux kernel's watchdog subsystem, specifically the DA9063 watchdog driver. The issue occurs during system suspend/resume operations. The driver fails to properly handle the watchdog timer when it is left running without userspace interaction. This causes the watchdog timer to continue counting down during suspend, potentially leading to an unexpected system reset when the system resumes.

Detection Guidance

This vulnerability affects the Linux kernel's watchdog subsystem, specifically the DA9063 watchdog driver. Detection requires checking the kernel version and watchdog driver status. Use 'uname -r' to check the kernel version and 'dmesg | grep da9063' to verify if the DA9063 watchdog driver is loaded. If the driver is active and the system is running a vulnerable kernel, further investigation is needed.

Impact Analysis

If your system uses the DA9063 watchdog timer and suspends without properly disabling the watchdog, this flaw could cause the system to reset unexpectedly during or after suspend. This may result in data loss, interrupted services, or system instability, especially in embedded or IoT devices relying on the watchdog for reliability.

Compliance Impact

This vulnerability could lead to unexpected system resets during suspend due to improper watchdog handling, potentially causing data loss or corruption. For compliance with standards like GDPR or HIPAA, which require data integrity and availability, such disruptions may violate requirements for continuous protection and availability of sensitive data.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to patch the vulnerability. If an update is not immediately available, disable the DA9063 watchdog driver by blacklisting it or unloading the module using 'modprobe -r da9063_wdt'. Ensure the watchdog is properly configured to avoid unexpected resets during suspend/resume cycles.

Hi! I’m here to help you understand CVE-2026-98410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70