All vulnerabilities
CVE-2026-98410

Linux: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in95adc37f47cdf5a5285f7163b24243680af510beAlso 1c42e39b0990371b9d76ae22c3f33eb6df341251, 960d1c85381bcaae866dd799b1c905ec5d39ebce and 2 moreCVE List
Published14 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 95adc37f47cdf5a5285f7163b24243680af510beLinuxCVE List
  • 1c42e39b0990371b9d76ae22c3f33eb6df341251LinuxCVE List
  • 960d1c85381bcaae866dd799b1c905ec5d39ebceLinuxCVE List
  • 1db134d0d2a51a136296584854570e5e04adedb0LinuxCVE List
  • 7cb575b71ab98194d2e040bded3a7281e089c5edLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be executed in da9063_wdt_suspend. In this case, the suspend callback is a no-op and the watchdog keeps counting during system suspend, leading to an unexpected system reset. Check WDOG_HW_RUNNING and wdd，can fix this issue.

Text from CVE List

Affected versions 14

  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before 95adc37f47cdf5a5285f7163b24243680af510beCVE List
  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before c30b419c7e6fbe31c48a44c828174168b732dc5bCVE List
  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before 1c42e39b0990371b9d76ae22c3f33eb6df341251CVE List
  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before 960d1c85381bcaae866dd799b1c905ec5d39ebceCVE List
  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before 1db134d0d2a51a136296584854570e5e04adedb0CVE List
  • Linuxaffected: a7ceca4398bc835c6ad29d10e1106de4cf0332e1 before 7cb575b71ab98194d2e040bded3a7281e089c5edCVE List
  • Linuxaffected: 5.19CVE List
  • Linuxunaffected: all versions before 5.19CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6