Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be executed in da9063_wdt_suspend. In this case, the suspend callback is a no-op and the watchdog keeps counting during system suspend, leading to an unexpected system reset. Check WDOG_HW_RUNNING and wdd，can fix this issue.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund14 Oct 2026WID-SEC-2026-3951

  Linux Kernel: Multiple vulnerabilities Translated from German

  CVE-2026-98426CVE-2026-98416CVE-2026-98393+43 more CVEs

[ References ]References

• git.kernel.org/stable/c/1c42e39b0990371b9d76ae22c3f33eb6df341251
• git.kernel.org/stable/c/1db134d0d2a51a136296584854570e5e04adedb0
• git.kernel.org/stable/c/7cb575b71ab98194d2e040bded3a7281e089c5ed
• git.kernel.org/stable/c/95adc37f47cdf5a5285f7163b24243680af510be
• git.kernel.org/stable/c/960d1c85381bcaae866dd799b1c905ec5d39ebce
• git.kernel.org/stable/c/c30b419c7e6fbe31c48a44c828174168b732dc5b