CVE-2026-93219

clocksource/drivers/timer-sun4i: Advertise a real minimum delta

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

clocksource/drivers/timer-sun4i: Advertise a real minimum delta

sun4i_clkevt_next_event() compensates for the timer stop/start synchronization delay by programming evt - TIMER_SYNC_TICKS into the hardware interval register. The clockevent device currently advertises TIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed to call set_next_event() with evt == TIMER_SYNC_TICKS.

That programs a zero-tick interval. With oneshot/highres/nohz timer operation this can leave the next event stuck, which was observed as a boot hang on Allwinner D1 after the clockevents core started reusing forced minimum-delta events.

Advertise one extra tick instead, so the smallest event accepted by the core still programs at least one hardware tick after the synchronization compensation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	12e1480bcb4920c1b02b3793cb48756497919a60 to before 0cc4b14d7401d50e53a01f1554147ee075ee6943Affected 12e1480bcb4920c1b02b3793cb48756497919a60 to before 53a3bc024b8e5d284468cce84957cded5f859f98Affected 12e1480bcb4920c1b02b3793cb48756497919a60 to before 753a220084dfc4d737f2ab9eaddc9a01a397edd7Affected 12e1480bcb4920c1b02b3793cb48756497919a60 to before ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44Affected 12e1480bcb4920c1b02b3793cb48756497919a60 to before 151eb52f8712017c8f7b00bb2305e8916cb9e3dcAffected 12e1480bcb4920c1b02b3793cb48756497919a60 to before bf38be01d43c4e4ca903aff7236d8486a950a252Affected 12e1480bcb4920c1b02b3793cb48756497919a60 to before f0efafcdf6eec1f3361bfd8c811420198f55c8bbAffected 12e1480bcb4920c1b02b3793cb48756497919a60 to before d21808328225ab8cee46885bf9a0dffcefbe630eAffected
LinuxLinux	3.13Affected before 3.13Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

12e1480bcb4920c1b02b3793cb48756497919a60 to before 0cc4b14d7401d50e53a01f1554147ee075ee6943Affected
12e1480bcb4920c1b02b3793cb48756497919a60 to before 53a3bc024b8e5d284468cce84957cded5f859f98Affected
12e1480bcb4920c1b02b3793cb48756497919a60 to before 753a220084dfc4d737f2ab9eaddc9a01a397edd7Affected
12e1480bcb4920c1b02b3793cb48756497919a60 to before ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44Affected
12e1480bcb4920c1b02b3793cb48756497919a60 to before 151eb52f8712017c8f7b00bb2305e8916cb9e3dcAffected
12e1480bcb4920c1b02b3793cb48756497919a60 to before bf38be01d43c4e4ca903aff7236d8486a950a252Affected
12e1480bcb4920c1b02b3793cb48756497919a60 to before f0efafcdf6eec1f3361bfd8c811420198f55c8bbAffected
12e1480bcb4920c1b02b3793cb48756497919a60 to before d21808328225ab8cee46885bf9a0dffcefbe630eAffected

LinuxLinux

3.13Affected
before 3.13Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.