CVE-2026-68092: time/jiffies: Register jiffies clocksource before usage
In the Linux kernel, the following vulnerability has been resolved:
time/jiffies: Register jiffies clocksource before usage
Teddy reported that a XEN HVM has a long boot delay, which was bisected to the recent enhancements to the negative motion detection. It turned out that the jiffies clocksource is used in early boot before it is registered, which leaves the maxdeltaraw field at zero. That causes the read out to be clamped to the max delta of 0, which means time is not making progress.
Cure it by ensuring that it is initialized before its first usage in timekeepinginit().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68092?
CVE-2026-68092 has a risk rating of 12, indicating a critical level of severity.
How do I fix CVE-2026-68092?
To fix CVE-2026-68092, ensure you update your Linux kernel to the latest patched version that resolves the jiffies clocksource registration issue.
What systems are affected by CVE-2026-68092?
CVE-2026-68092 affects systems running Linux kernel versions that include the jiffies clocksource prior to the patch.
What are the potential impacts of CVE-2026-68092?
The potential impacts of CVE-2026-68092 include prolonged boot delays and performance degradation in systems utilizing XEN HVM.
Who reported CVE-2026-68092?
CVE-2026-68092 was reported by a security researcher named Teddy.