Impact
The daemon watchdog driver for da9063 failed to disable the hardware watchdog when the system entered suspend mode. Because the watchdog was left running, it continued counting during the suspend period and triggered a reset when the system resumed. The flaw results in a denial‑of‑service event where the system performs an unexpected reset without external input.
Affected Systems
The vulnerability affects any Linux kernel that includes the da9063 watchdog driver without the patch. No specific versions are listed, so all kernel releases before the patch are potentially vulnerable.
Risk and Exploitability
The vulnerability carries a CVSS score of 5.5, indicating moderate severity. The EPSS score of <1% suggests a low current exploitation probability, and it is not listed in CISA KEV. The flaw is local, requiring kernel‑level access to the watchdog device; typical remote exploitation is unlikely. If an attacker can trigger a suspend/resume cycle while the driver remains in its flawed state, the watchdog will continue counting and trigger an unexpected system reset. This would result in a denial‑of‑service condition. The likely attack vector is a local system with privileged access that can initiate suspend/resume cycles.
OpenCVE Enrichment
Debian DLA
Debian DSA