CVE-2026-68092
Received Received - Intake

Clocksource Registration Flaw in Linux Kernel

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has a long boot delay, which was bisected to the recent enhancements to the negative motion detection. It turned out that the jiffies clocksource is used in early boot before it is registered, which leaves the max_delta_raw field at zero. That causes the read out to be clamped to the max delta of 0, which means time is not making progress. Cure it by ensuring that it is initialized before its first usage in timekeeping_init().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68092
EUVD
EUVD-2026-55273

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the jiffies clocksource being used before it is registered during early boot in a XEN HVM system. This causes the max_delta_raw field to remain zero, preventing time from progressing normally and leading to a long boot delay.

Detection Guidance

This vulnerability is specific to the Linux kernel's jiffies clocksource initialization and may not have direct detection commands. Monitor system boot logs for delays or errors related to timekeeping initialization, particularly on XEN HVM systems. Check dmesg for early boot issues.

Impact Analysis

The vulnerability can cause systems to experience significantly delayed boot times, potentially disrupting services or operations that rely on timely startup. It specifically affects XEN HVM environments.

Mitigation Strategies

Apply the latest Linux kernel patches to ensure the jiffies clocksource is registered before use. For XEN HVM systems, verify the kernel version includes the fix for early boot timekeeping initialization.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68092. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart