CVE-2026-98249

A flaw was found in the Linux kernel. This vulnerability may allow a local privileged user to cause a Denial of Service (DoS) on ARM64 systems. When resuming from hibernation, the kernel fails to supply the required parameters when resetting hypervisor exception vectors, leaving the hypervisor pointing to memory pages that are released immediately afterward. Accessing this freed memory during resume can lead to memory corruption and trigger a system hang.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access on 64-bit ARM (aarch64) systems and depends on a system resume cycle after hibernation. In enterprise server and container host environments, hibernation (suspend-to-disk) is rarely configured or used, significantly restricting exposure. An attacker or local process triggering a resume sequence on affected ARM64 hardware could cause memory corruption or a kernel hang, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.