CVE-2026-93256
kernel: arm64: hibernate: mask DAIF before restoring hibernated kernel
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel. During the hibernation resume process on ARM64 systems, the kernel fails to properly mask processor exceptions before restoring the suspended system state. A local user could encounter or trigger an unhandled hardware exception while the system is in this transient, inconsistent state. This failure leads to an unexpected kernel crash, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low severity impact on Red Hat Enterprise Linux because exploitation is constrained to ARM64 environments and requires system hibernation, a feature uncommon in enterprise server deployments. The flaw only manifests during the transient phase when restoring a hibernated system image, requiring an unmasked hardware or debug exception to coincide precisely with this window. Under typical enterprise workloads where suspend-to-disk is disabled or unused, standard operations remain completely unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-248 · Uncaught Exception