CVE-2026-90290

arm64: hibernate: Restore DAIF state on error

N/A
Published: September 17, 2026 at 04:08 PM UTC
Updated: October 19, 2026 at 09:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error Sashiko AI has reported that if swsusp_mte_save_tags() for some reason fails we return from swsusp_arch_suspend() with DAIF being masked - that is not what we'd expect. Restore the saved DAIF state before returning from the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.10ee11f332af96a3b5d29586bc6d69b41531f62648
Vendor states this is fixed in 2c941f383a53e188cd6fe3a129eb9b52b298e683 (fixed)
Vendor states this is fixed in 519e7de2c4c7b92ef57d4404b7e564aa9be24143 (fixed)
Vendor states this is fixed in 541549827889d0380fd73f8aacb5de6ef7a5a1ac (fixed)
Vendor states this is fixed in 77053624d03359a4e2ec47d7106639ec9a498c2b (fixed)
Vendor states this is fixed in ad3839fe2114bb092846df79edd8d119e148b8c3 (fixed)
Vendor states this is fixed in c8c6835f62a7f9fc68865e85397d13a2dc9210fb (fixed)
Vendor states this is fixed in cb51a05498e755d900900ff4b8503b4da4325996 (fixed)
Vendor states this is fixed in f5693dfaf28d66e7e880feafd1778d3715869efc (fixed)
Vendor states this is fixed in 5.10 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card