In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the… (CVE-2026-80927)
A vulnerability in the Linux kernel's timekeeping subsystem was resolved involving improper handling of the return value from tk_get_aux_ts64 in the __do_adjtimex() function. This flaw could lead to uninitialized stack data being used in calculations and indirectly leaked to userspace if the auxiliary clock state changes during execution. Although a race condition remains, its impact is limited to incorrect time adjustments, which userspace is responsible for handling.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-80927 involves the timekeeping code path in __do_adjtimex(), where failure to properly check the return value of tk_get_aux_ts64 can cause uninitialized stack data to be used and leaked to userspace if the auxiliary clock is disabled and then re-enabled during execution. The race condition persists after the fix but only causes incorrect time adjustments, which are considered a userspace responsibility.
Potential Impact
The vulnerability may lead to indirect leakage of uninitialized kernel stack data to userspace, potentially exposing sensitive information. However, the residual race condition after the fix only results in incorrect time adjustments, which do not pose a direct security risk and are expected to be managed by userspace applications.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to check the return value of tk_get_aux_ts64 properly, mitigating the uninitialized data leak. Users should update to the patched kernel version once available. No additional mitigation is required for the remaining race condition as it affects only time adjustment accuracy.
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the… (CVE-2026-80927)
Description
A vulnerability in the Linux kernel's timekeeping subsystem was resolved involving improper handling of the return value from tk_get_aux_ts64 in the __do_adjtimex() function. This flaw could lead to uninitialized stack data being used in calculations and indirectly leaked to userspace if the auxiliary clock state changes during execution. Although a race condition remains, its impact is limited to incorrect time adjustments, which userspace is responsible for handling.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-80927 involves the timekeeping code path in __do_adjtimex(), where failure to properly check the return value of tk_get_aux_ts64 can cause uninitialized stack data to be used and leaked to userspace if the auxiliary clock is disabled and then re-enabled during execution. The race condition persists after the fix but only causes incorrect time adjustments, which are considered a userspace responsibility.
Potential Impact
The vulnerability may lead to indirect leakage of uninitialized kernel stack data to userspace, potentially exposing sensitive information. However, the residual race condition after the fix only results in incorrect time adjustments, which do not pose a direct security risk and are expected to be managed by userspace applications.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to check the return value of tk_get_aux_ts64 properly, mitigating the uninitialized data leak. Users should update to the patched kernel version once available. No additional mitigation is required for the remaining race condition as it affects only time adjustment accuracy.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g365-rm76-m26c
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80927"]
Threat ID: 6aa4a03355bf5e2cf5a873f7
Added to database: 09/12/2026, 00:43:31 UTC
Last enriched: 09/12/2026, 01:27:21 UTC
Last updated: 09/12/2026, 02:01:26 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.