timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the auxiliary clock is disabled during tk_get_aux_ts64() but is enabled before tks->clock_valid is checked, then uninitialized stackdata will be used in the calculations and indirectly leaked to userspace. The same race window also exists after this change and also for the core timekeeper. But in these cases the only effect would be incorrect adjustments and this is userspace's responsibility to avoid this.
CVE-2026-80927
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-80927
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4eca49d0b621b314ac7c80f363932ec6f6c8abc8",
"lessThan": "fecf1e37775269ad38c172b468ad4ecc3968aa63",
"versionType": "git"
},
{
"status": "affected",
"version": "4eca49d0b621b314ac7c80f363932ec6f6c8abc8",
"lessThan": "bc59dac50cb45a725f7a50760c7cc72a0964f722",
"versionType": "git"
},
{
"status": "affected",
"version": "4eca49d0b621b314ac7c80f363932ec6f6c8abc8",
"lessThan": "4b61084b11bcecce86d03804ff30f8d7b465593c",
"versionType": "git"
}
],
"programFiles": [
"kernel/time/timekeeping.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.17"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.18.50",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.4",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"kernel/time/timekeeping.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-80927
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #34888 · Revision 1
- Added to Heist Feed
- Publisher date