CVE-2026-93219

CVE-2026-93219: vulnerability in Linux

clocksource/drivers/timer-sun4i: Advertise a real minimum delta

Published

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 93% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sun4i: Advertise a real minimum delta sun4i_clkevt_next_event() compensates for the timer stop/start synchronization delay by programming evt - TIMER_SYNC_TICKS into the hardware interval register. The clockevent device currently advertises TIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed to call set_next_event() with evt == TIMER_SYNC_TICKS. That programs a zero-tick interval. With oneshot/highres/nohz timer operation this can leave the next event stuck, which was observed as a boot hang on Allwinner D1 after the clockevents core started reusing forced minimum-delta events. Advertise one extra tick instead, so the smallest event accepted by the core still programs at least one hardware tick after the synchronization compensation.
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/0cc4b14d7401d50e53a01f1554147ee075ee6943https://git.kernel.org/stable/c/151eb52f8712017c8f7b00bb2305e8916cb9e3dchttps://git.kernel.org/stable/c/53a3bc024b8e5d284468cce84957cded5f859f98https://git.kernel.org/stable/c/753a220084dfc4d737f2ab9eaddc9a01a397edd7https://git.kernel.org/stable/c/bf38be01d43c4e4ca903aff7236d8486a950a252https://git.kernel.org/stable/c/d21808328225ab8cee46885bf9a0dffcefbe630ehttps://git.kernel.org/stable/c/ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44https://git.kernel.org/stable/c/f0efafcdf6eec1f3361bfd8c811420198f55c8bb