-

CVE-2026-80927

timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

In the Linux kernel, the following vulnerability has been resolved:

timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

If the auxiliary clock is disabled during tk_get_aux_ts64() but is enabled
before tks->clock_valid is checked, then uninitialized stackdata will be
used in the calculations and indirectly leaked to userspace.

The same race window also exists after this change and also for the core
timekeeper. But in these cases the only effect would be incorrect
adjustments and this is userspace's responsibility to avoid this.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4eca49d0b621b314ac7c80f363932ec6f6c8abc8
Version < fecf1e37775269ad38c172b468ad4ecc3968aa63
Status affected
Version 4eca49d0b621b314ac7c80f363932ec6f6c8abc8
Version < bc59dac50cb45a725f7a50760c7cc72a0964f722
Status affected
Version 4eca49d0b621b314ac7c80f363932ec6f6c8abc8
Version < 4b61084b11bcecce86d03804ff30f8d7b465593c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.17
Status affected
Version 0
Version < 6.17
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fecf1e37775269ad38c172b468ad4ecc3968aa63
https://git.kernel.org/stable/c/bc59dac50cb45a725f7a50760c7cc72a0964f722
https://git.kernel.org/stable/c/4b61084b11bcecce86d03804ff30f8d7b465593c