Bug 2513138 (CVE-2026-68092) - CVE-2026-68092 kernel: time/jiffies: Register jiffies clocksource before usage
Summary: CVE-2026-68092 kernel: time/jiffies: Register jiffies clocksource before usage
Keywords:
Status: NEW
Alias: CVE-2026-68092
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-10 12:02 UTC by OSIDB Bzimport
Modified: 2026-08-11 10:12 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-10 12:02:04 UTC
In the Linux kernel, the following vulnerability has been resolved:

time/jiffies: Register jiffies clocksource before usage

Teddy reported that a XEN HVM has a long boot delay, which was bisected to
the recent enhancements to the negative motion detection. It turned out
that the jiffies clocksource is used in early boot before it is registered,
which leaves the max_delta_raw field at zero. That causes the read out to
be clamped to the max delta of 0, which means time is not making progress.

Cure it by ensuring that it is initialized before its first usage in
timekeeping_init().


Note You need to log in before you can comment on or make changes to this bug.