{"schema":"threatline.record/2","record":{"id":"CVE-2026-98249","aliases":[],"summary":"arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc","details":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc\n\nswsusp_arch_suspend_exit() reinstalls the restored kernel's hyp stub\nvectors with an hvc, but never passes the arguments. x0 is not set to\nHVC_SET_VECTORS and x1 is not set to the vector address, so the stub\ndispatch falls through and returns without writing vbar_el2. EL2 is\nleft pointing at the trans_pgd copy of the vectors, a page that\nswsusp_free() releases right after resume.\n\nSet the arguments up the same way __hyp_set_vectors() does.\n\nWithout this fix, Vladimir was able to trigger a hang when resuming from\nhibernation with CONFIG_PAGE_POISONING=y and page_poison=on.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"6646418d1032cac25110526161f60d255ed08397","status":"affected","versionType":"git"},{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"909e92423db7299e0206232051aa21fe129f65d0","status":"affected","versionType":"git"},{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"60a3c319f1127c4d247d4ed235c5d65376d5e745","status":"affected","versionType":"git"},{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"e80ea8118a073a30ebe7a31bd78938c2b1751acc","status":"affected","versionType":"git"},{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"d3f8f773312af69eaf4dda106d76d6d42e4362e5","status":"affected","versionType":"git"},{"version":"788bfdd97434982b6d575062581e8e72eea755af","lessThan":"955d86e5f3b95b731991fdb84966c50b16314629","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"5.16","status":"affected"},{"version":"0","lessThan":"5.16","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.112","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.54","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.8","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6646418d1032cac25110526161f60d255ed08397","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"909e92423db7299e0206232051aa21fe129f65d0","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"60a3c319f1127c4d247d4ed235c5d65376d5e745","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","source_modified_at":"2026-10-19T09:16:20.676Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"955d86e5f3b95b731991fdb84966c50b16314629","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.0018,"percentile":0.07201,"score_date":"2026-10-23"},"published_at":"2026-10-06T08:45:17.414Z","modified_at":"2026-10-19T09:16:20.676Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98249","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:16:20.676Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98249","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/6646418d1032cac25110526161f60d255ed08397"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/909e92423db7299e0206232051aa21fe129f65d0"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/60a3c319f1127c4d247d4ed235c5d65376d5e745"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e80ea8118a073a30ebe7a31bd78938c2b1751acc"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/d3f8f773312af69eaf4dda106d76d6d42e4362e5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/955d86e5f3b95b731991fdb84966c50b16314629"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:16:20.676Z","content_hash":"d46fa6cedc8f8643637d588c976beb26b4e75754ed7e8d6019648ed43ad601f9"}}