Description
In the Linux kernel, the following vulnerability has been resolved:

watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(),
when the watchdog is left running by the driver sets
WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the
device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be
executed in da9063_wdt_suspend. In this case, the suspend callback is
a no-op and the watchdog keeps counting during system suspend,
leading to an unexpected system reset.
Check WDOG_HW_RUNNING and wdd,can fix this issue.
Published: 2026-10-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via unintended system reset
Action: Apply Patch
AI Analysis

Impact

The daemon watchdog driver for da9063 failed to disable the hardware watchdog when the system entered suspend mode. Because the watchdog was left running, it continued counting during the suspend period and triggered a reset when the system resumed. The flaw results in a denial‑of‑service event where the system performs an unexpected reset without external input.

Affected Systems

The vulnerability affects any Linux kernel that includes the da9063 watchdog driver without the patch. No specific versions are listed, so all kernel releases before the patch are potentially vulnerable.

Risk and Exploitability

The vulnerability carries a CVSS score of 5.5, indicating moderate severity. The EPSS score of <1% suggests a low current exploitation probability, and it is not listed in CISA KEV. The flaw is local, requiring kernel‑level access to the watchdog device; typical remote exploitation is unlikely. If an attacker can trigger a suspend/resume cycle while the driver remains in its flawed state, the watchdog will continue counting and trigger an unexpected system reset. This would result in a denial‑of‑service condition. The likely attack vector is a local system with privileged access that can initiate suspend/resume cycles.

Generated by OpenCVE AI on October 17, 2026 at 00:03 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a release that includes the da9063 watchdog driver fix (commit 1c42e39b0990371b9d76ae22c3f33eb6df341251 or later).
  • If kernel upgrade is not possible, apply the upstream patch that adds a check for WDOG_HW_RUNNING in da9063_wdt_suspend() and da9063_wdt_resume() to correctly disable the watchdog during suspend.
  • After applying the patch or upgrade, reboot the system to ensure the watchdog firmware is reset and monitor system logs for any watchdog reset events to validate the fix.
  • Ensure that suspend/resume operations are performed by trusted users or processes to reduce the risk of accidental trigger of the watchdog reset.

Generated by OpenCVE AI on October 17, 2026 at 00:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4841-1 linux security update
Debian DLA Debian DLA DLA-4850-1 linux-6.12 security update
Debian DSA Debian DSA DSA-6568-1 linux security update
History

Fri, 16 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-459
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Thu, 15 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Thu, 15 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Wed, 14 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be executed in da9063_wdt_suspend. In this case, the suspend callback is a no-op and the watchdog keeps counting during system suspend, leading to an unexpected system reset. Check WDOG_HW_RUNNING and wdd,can fix this issue.
Title watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T09:19:04.415Z

Reserved: 2026-09-25T10:25:14.347Z

Link: CVE-2026-98410

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T14:17:52.207

Modified: 2026-10-19T10:18:46.210

Link: CVE-2026-98410

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-14T00:00:00Z

Links: CVE-2026-98410 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T18:30:02Z

Weaknesses