CVE-2026-93256

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> arm64: hibernate: mask DAIF before restoring hibernated kernel<br /> <br /> The arm64 hibernate code manages the exception masking in an unsound<br /> way, leading to potential crashes and/or warnings during resume.<br /> <br /> When a hibernation image is saved in `swsusp_arch_suspend()`, all DAIF<br /> exceptions are masked (by virtue of `local_daif_save()`), and the<br /> suspended image is saved assuming that all DAIF exceptions will remain<br /> masked when the image is restored.<br /> <br /> When a hibernation image is resumed by `swsusp_arch_resume()`, only<br /> interrupts are masked (by virtue of `local_irq_disable()` in<br /> `resume_target_kernel()`). When pseudo-NMI is enabled the DAIF.IF bits<br /> will be clear, and regardless of pseudo-NMI the DAIF.DA bits will be<br /> clear.<br /> <br /> This means that there are two problems:<br /> <br /> (1) It is possible to take Debug, SError, or pseudo-NMI exceptions<br /> during the resume process. This is unsafe, as during the resume<br /> process both the old ane new kernels will tranisently be in an<br /> inconsistent state, and swsusp_arch_suspend_exit() won&amp;#39;t retain<br /> an executable mapping of any exception vectors.<br /> <br /> Any exception taken here will be fatal and silent.<br /> <br /> (2) When re-entering the resumed kernel, some DAIF bits will be clear<br /> unexpectedly. This permits Debug, SError, or pseudo-NMI exceptions<br /> to be taken for a short period while the resumed kernel is not yet<br /> in a consistent state.<br /> <br /> This is detected by CONFIG_ARM64_DEBUG_PRIORITY_MASKING.<br /> <br /> Avoid these issues by masking all DAIF exceptions during resume.