CVE-2026-68134
Received Received - Intake

PTP Facility Check Missing in Linux Kernel

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68134
EUVD
EUVD-2026-55515

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing facility check in the ptp_s390 driver. The issue occurs when the physical clock is registered without verifying if facility 28 is installed or if PTFF QAF indicates PTFF QPT availability.

Detection Guidance

This vulnerability affects the Linux kernel's PTP (Precision Time Protocol) s390 implementation. Detection requires checking if facility 28 is installed and if PTFF QPT is available on IBM Z systems. Use the 'lscpu' command to verify CPU facilities and 'stty -a' for PTFF support.

Impact Analysis

This vulnerability could lead to improper clock registration, potentially causing time synchronization issues in systems using the ptp_s390 driver. This may result in inaccurate timekeeping or system instability.

Mitigation Strategies

Apply the latest Linux kernel security patches that address this issue. Ensure facility 28 is properly configured on IBM Z systems. Monitor IBM's security advisories for additional guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68134. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart