Skip to main content
VulnerabilityPublished Updated

CVE-2026-98410: Linux kernel · watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in c30b419c7e6fbe31c48a44c828174168b732dc5b : patch Linux kernel soon.

Data as of 26 Oct 2026, 14:05 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in c30b419c7e6fbe31c48a44c828174168b732dc5b, 960d1c85381bcaae866dd799b1c905ec5d39ebce, 95adc37f47cdf5a5285f7163b24243680af510be +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < c30b419c7e6fbe31c48a44c828174168b732dc5b
Fixed in
  • c30b419c7e6fbe31c48a44c828174168b732dc5b
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < 960d1c85381bcaae866dd799b1c905ec5d39ebce
Fixed in
  • 960d1c85381bcaae866dd799b1c905ec5d39ebce
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < 95adc37f47cdf5a5285f7163b24243680af510be
Fixed in
  • 95adc37f47cdf5a5285f7163b24243680af510be
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < 7cb575b71ab98194d2e040bded3a7281e089c5ed
Fixed in
  • 7cb575b71ab98194d2e040bded3a7281e089c5ed
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < 1db134d0d2a51a136296584854570e5e04adedb0
Fixed in
  • 1db134d0d2a51a136296584854570e5e04adedb0
LinuxLinuxAffected
  • ≥ a7ceca4398bc835c6ad29d10e1106de4cf0332e1, < 1c42e39b0990371b9d76ae22c3f33eb6df341251
Fixed in
  • 1c42e39b0990371b9d76ae22c3f33eb6df341251

AI-suggested

A fix is available and has been applied in the Linux kernel commits identified by the fixedVersions hashes. Users should update their Linux kernel to a version including these fixes to resolve the suspend/resume handling issue with the da9063 watchdog driver.

Description

A vulnerability in the Linux kernel watchdog driver da9063 affects suspend/resume handling when the hardware watchdog is running but userspace never opens the device. This causes the watchdog to keep counting during system suspend, potentially leading to unexpected system resets. The issue is fixed by checking the WDOG_HW_RUNNING flag during suspend and resume operations.

References

Community reviews

Loading reviews…