CVE-2026-23128

A flaw was found in the Linux kernel on arm64 systems with Control Flow Integrity (CFI) enabled. During hibernate resume, the swsusp_arch_resume() function attempts to verify a CFI hash when calling swsusp_arch_suspend_exit(), which is marked as SYM_CODE and lacks a CFI hash. This causes a data abort (DABT) and kernel crash when resuming from hibernation, resulting in a failed resume operation.

This flaw affects arm64 systems with CFI enabled that use hibernation. Even if server or desktop Linux deployments uses hibernation, still the CFI is not universally enabled. Android-based systems using hibernation with CFI-enabled kernels are the primary affected platforms. On arm64 systems with kernel CFI enabled, resuming from hibernation can crash due to a control flow integrity mismatch. The hibernation resume path swsusp_arch_resume calls into a copied instance of swsusp_arch_suspend_exit located in the hibernate exit text region. The referenced suspend exit entrypoint is defined using SYM_CODE and therefore does not carry a CFI type hash. When swsusp_arch_resume performs the indirect call into this copied code, CFI attempts to validate the target and fails because the expected hash is missing. On affected Android based devices this manifests as a data abort and kernel oops during resume, resulting in a denial of service by preventing successful restoration from hibernation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.