Description
In the Linux kernel, the following vulnerability has been resolved:

arm64: hibernate: mask DAIF before restoring hibernated kernel

The arm64 hibernate code manages the exception masking in an unsound
way, leading to potential crashes and/or warnings during resume.

When a hibernation image is saved in `swsusp_arch_suspend()`, all DAIF
exceptions are masked (by virtue of `local_daif_save()`), and the
suspended image is saved assuming that all DAIF exceptions will remain
masked when the image is restored.

When a hibernation image is resumed by `swsusp_arch_resume()`, only
interrupts are masked (by virtue of `local_irq_disable()` in
`resume_target_kernel()`). When pseudo-NMI is enabled the DAIF.IF bits
will be clear, and regardless of pseudo-NMI the DAIF.DA bits will be
clear.

This means that there are two problems:

(1) It is possible to take Debug, SError, or pseudo-NMI exceptions
during the resume process. This is unsafe, as during the resume
process both the old ane new kernels will tranisently be in an
inconsistent state, and swsusp_arch_suspend_exit() won't retain
an executable mapping of any exception vectors.

Any exception taken here will be fatal and silent.

(2) When re-entering the resumed kernel, some DAIF bits will be clear
unexpectedly. This permits Debug, SError, or pseudo-NMI exceptions
to be taken for a short period while the resumed kernel is not yet
in a consistent state.

This is detected by CONFIG_ARM64_DEBUG_PRIORITY_MASKING.

Avoid these issues by masking all DAIF exceptions during resume.
Published: 2026-09-24
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: kernel crash during hibernation resume leading to loss of availability
Action: Apply kernel patch
AI Analysis

Impact

The Linux kernel on ARM64 architectures incorrectly handles DAIF exception masking during the hibernate resume path. When the system suspends, all DAIF bits are fully masked, but the resume routine only masks interrupts, leaving Debug, SError, and pseudo‑NMI exceptions unmasked while the kernel is in an inconsistent state. If any of these exceptions occur, the kernel crashes silently, which can cause the system to reboot or hang. The underlying weakness is an internal fault caused by improper exception masking across suspend boundaries, compromising the integrity of the kernel state.

Affected Systems

All Linux kernels running on ARM64 devices that use the standard swsusp suspend/resume mechanism are affected. This includes every kernel build that has not incorporated the patch that masks all DAIF bits during resume. The issue is not tied to a particular release version, so any kernel version prior to the fix is potentially vulnerable.

Risk and Exploitability

The flaw does not rely on any user‑supplied input; it is triggered internally during the resume operation. An attacker would need to cause the system to resume from a hibernation image that could be corrupted or maliciously crafted, which is not documented as an external attack vector. The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog, suggesting no known public exploitation. Nonetheless, the impact—a kernel crash that disrupts availability—is high, and the risk can be considered moderate to high for environments that rely on hibernation.

Generated by OpenCVE AI on September 25, 2026 at 11:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the patch fixing DAIF masking during resume
  • If a patch cannot be applied immediately, disable the hibernation/resume feature or prevent the system from entering hibernation
  • Remove any existing swap or hibernation images so the system cannot resume a potentially compromised state

Generated by OpenCVE AI on September 25, 2026 at 11:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4817-1 linux-6.12 security update
Debian DSA Debian DSA DSA-6528-1 linux security update
History

Fri, 25 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Thu, 24 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: mask DAIF before restoring hibernated kernel The arm64 hibernate code manages the exception masking in an unsound way, leading to potential crashes and/or warnings during resume. When a hibernation image is saved in `swsusp_arch_suspend()`, all DAIF exceptions are masked (by virtue of `local_daif_save()`), and the suspended image is saved assuming that all DAIF exceptions will remain masked when the image is restored. When a hibernation image is resumed by `swsusp_arch_resume()`, only interrupts are masked (by virtue of `local_irq_disable()` in `resume_target_kernel()`). When pseudo-NMI is enabled the DAIF.IF bits will be clear, and regardless of pseudo-NMI the DAIF.DA bits will be clear. This means that there are two problems: (1) It is possible to take Debug, SError, or pseudo-NMI exceptions during the resume process. This is unsafe, as during the resume process both the old ane new kernels will tranisently be in an inconsistent state, and swsusp_arch_suspend_exit() won't retain an executable mapping of any exception vectors. Any exception taken here will be fatal and silent. (2) When re-entering the resumed kernel, some DAIF bits will be clear unexpectedly. This permits Debug, SError, or pseudo-NMI exceptions to be taken for a short period while the resumed kernel is not yet in a consistent state. This is detected by CONFIG_ARM64_DEBUG_PRIORITY_MASKING. Avoid these issues by masking all DAIF exceptions during resume.
Title arm64: hibernate: mask DAIF before restoring hibernated kernel
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-24T15:51:43.080Z

Reserved: 2026-09-17T16:02:15.096Z

Link: CVE-2026-93256

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T16:17:22.157

Modified: 2026-09-24T16:17:22.157

Link: CVE-2026-93256

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T11:15:05Z

Weaknesses