In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a… (CVE-2026-68092)
A vulnerability in the Linux kernel related to the jiffies clocksource usage during early boot has been resolved. The issue caused the jiffies clocksource to be used before it was registered, resulting in a max_delta_raw field value of zero. This caused the system time to not progress correctly during boot, leading to long boot delays on XEN HVM systems. The fix ensures the jiffies clocksource is initialized before its first usage in timekeeping_init().
AI Analysis
Technical Summary
The Linux kernel had a vulnerability where the jiffies clocksource was used before being registered during early boot. This caused the max_delta_raw field to remain zero, clamping the time readout to a max delta of zero and preventing time progression. This issue was identified through a report of long boot delays on XEN HVM systems. The vulnerability was fixed by initializing the jiffies clocksource before its first use in the timekeeping_init() function.
Potential Impact
The vulnerability caused the system time to stall during early boot, resulting in long boot delays on affected systems, specifically XEN HVM environments. There is no indication of further security impact such as privilege escalation or code execution. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented that ensures the jiffies clocksource is registered before its first usage in the timekeeping_init() function. Users should apply the official Linux kernel update containing this fix once available. Patch status is not yet confirmed; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a… (CVE-2026-68092)
Description
A vulnerability in the Linux kernel related to the jiffies clocksource usage during early boot has been resolved. The issue caused the jiffies clocksource to be used before it was registered, resulting in a max_delta_raw field value of zero. This caused the system time to not progress correctly during boot, leading to long boot delays on XEN HVM systems. The fix ensures the jiffies clocksource is initialized before its first usage in timekeeping_init().
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel had a vulnerability where the jiffies clocksource was used before being registered during early boot. This caused the max_delta_raw field to remain zero, clamping the time readout to a max delta of zero and preventing time progression. This issue was identified through a report of long boot delays on XEN HVM systems. The vulnerability was fixed by initializing the jiffies clocksource before its first use in the timekeeping_init() function.
Potential Impact
The vulnerability caused the system time to stall during early boot, resulting in long boot delays on affected systems, specifically XEN HVM environments. There is no indication of further security impact such as privilege escalation or code execution. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented that ensures the jiffies clocksource is registered before its first usage in the timekeeping_init() function. Users should apply the official Linux kernel update containing this fix once available. Patch status is not yet confirmed; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x4mh-q3jq-rwpp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68092"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a79f0c4bf8831d539f5dcc1
Added to database: 08/10/2026, 15:39:48 UTC
Last enriched: 08/10/2026, 15:43:24 UTC
Last updated: 08/10/2026, 19:41:03 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.