{"id":"CVE-2026-98249","revision":"6665d629b5914669850b1037906e45a4","records":[{"revision":"6665d629b5914669850b1037906e45a4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98249","aliases":[],"title":"arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc","description":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc\n\nswsusp_arch_suspend_exit() reinstalls the restored kernel's hyp stub\nvectors with an hvc, but never passes the arguments. x0 is not set to\nHVC_SET_VECTORS and x1 is not set to the vector address, so the stub\ndispatch falls through and returns without writing vbar_el2. EL2 is\nleft pointing at the trans_pgd copy of the vectors, a page that\nswsusp_free() releases right after resume.\n\nSet the arguments up the same way __hyp_set_vectors() does.\n\nWithout this fix, Vladimir was able to trigger a hang when resuming from\nhibernation with CONFIG_PAGE_POISONING=y and page_poison=on.","state":0,"publishedAt":"2026-10-06T08:45:17.414+00:00","modifiedAt":"2026-10-19T09:16:20.676+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/arm64/kernel/hibernate-asm.S\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"6646418d1032cac25110526161f60d255ed08397\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"909e92423db7299e0206232051aa21fe129f65d0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"60a3c319f1127c4d247d4ed235c5d65376d5e745\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"e80ea8118a073a30ebe7a31bd78938c2b1751acc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"d3f8f773312af69eaf4dda106d76d6d42e4362e5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"788bfdd97434982b6d575062581e8e72eea755af\",\n                            \"lessThan\": \"955d86e5f3b95b731991fdb84966c50b16314629\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/arm64/kernel/hibernate-asm.S\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.16\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.16\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/6646418d1032cac25110526161f60d255ed08397","https://git.kernel.org/stable/c/909e92423db7299e0206232051aa21fe129f65d0","https://git.kernel.org/stable/c/60a3c319f1127c4d247d4ed235c5d65376d5e745","https://git.kernel.org/stable/c/e80ea8118a073a30ebe7a31bd78938c2b1751acc","https://git.kernel.org/stable/c/d3f8f773312af69eaf4dda106d76d6d42e4362e5","https://git.kernel.org/stable/c/955d86e5f3b95b731991fdb84966c50b16314629"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98249","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98249","identifiers":["CVE-2026-98249"]},"retained":false,"historicalAffected":[]}],"coverage":[]}