CVE-2026-23128

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

arm64: Set __nocfi on swsusp_arch_resume()

A DABT is reported[1] on an android based system when resume from hiberate.

This happens because swsusp_arch_suspend_exit() is marked with SYM_CODE_*()

and does not have a CFI hash, but swsusp_arch_resume() will attempt to

verify the CFI hash when calling a copy of swsusp_arch_suspend_exit().

Given that there's an existing requirement that the entrypoint to

swsusp_arch_suspend_exit() is the first byte of the .hibernate_exit.text

section, we cannot fix this by marking swsusp_arch_suspend_exit() with

SYM_FUNC_*(). The simplest fix for now is to disable the CFI check in

swsusp_arch_resume().

Mark swsusp_arch_resume() as __nocfi to disable the CFI check.

[1]

[ 22.991934][ T1] Unable to handle kernel paging request at virtual address 0000000109170ffc

[ 22.991934][ T1] Mem abort info:

[ 22.991934][ T1] ESR = 0x0000000096000007

[ 22.991934][ T1] EC = 0x25

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References