{"id":"CVE-2026-93219","state":"PUBLISHED","title":"clocksource/drivers/timer-sun4i: Advertise a real minimum delta","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource/drivers/timer-sun4i: Advertise a real minimum delta\n\nsun4i_clkevt_next_event() compensates for the timer stop/start\nsynchronization delay by programming evt - TIMER_SYNC_TICKS into the\nhardware interval register. The clockevent device currently advertises\nTIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed\nto call set_next_event() with evt == TIMER_SYNC_TICKS.\n\nThat programs a zero-tick interval. With oneshot/highres/nohz timer\noperation this can leave the next event stuck, which was observed as a\nboot hang on Allwinner D1 after the clockevents core started reusing\nforced minimum-delta events.\n\nAdvertise one extra tick instead, so the smallest event accepted by the\ncore still programs at least one hardware tick after the synchronization\ncompensation.","publishedAt":"2026-09-24T15:10:42.900Z","updatedAt":"2026-10-19T09:07:31.003Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"0cc4b14d7401d50e53a01f1554147ee075ee6943","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"53a3bc024b8e5d284468cce84957cded5f859f98","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"753a220084dfc4d737f2ab9eaddc9a01a397edd7","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"151eb52f8712017c8f7b00bb2305e8916cb9e3dc","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"bf38be01d43c4e4ca903aff7236d8486a950a252","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"f0efafcdf6eec1f3361bfd8c811420198f55c8bb","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"d21808328225ab8cee46885bf9a0dffcefbe630e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/clocksource/timer-sun4i.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.13","versionType":"semver"},{"version":"5.10.270","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.221","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.188","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.109","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.50","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.4","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/clocksource/timer-sun4i.c"]}],"references":["https://git.kernel.org/stable/c/0cc4b14d7401d50e53a01f1554147ee075ee6943","https://git.kernel.org/stable/c/53a3bc024b8e5d284468cce84957cded5f859f98","https://git.kernel.org/stable/c/753a220084dfc4d737f2ab9eaddc9a01a397edd7","https://git.kernel.org/stable/c/ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44","https://git.kernel.org/stable/c/151eb52f8712017c8f7b00bb2305e8916cb9e3dc","https://git.kernel.org/stable/c/bf38be01d43c4e4ca903aff7236d8486a950a252","https://git.kernel.org/stable/c/f0efafcdf6eec1f3361bfd8c811420198f55c8bb","https://git.kernel.org/stable/c/d21808328225ab8cee46885bf9a0dffcefbe630e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/93xxx/CVE-2026-93219.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-93219","state":"PUBLISHED","datePublished":"2026-09-24T15:10:42.900Z","dateUpdated":"2026-10-19T09:07:31.003Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-09-17T16:02:15.094Z"},"containers":{"cna":{"title":"clocksource/drivers/timer-sun4i: Advertise a real minimum delta","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource/drivers/timer-sun4i: Advertise a real minimum delta\n\nsun4i_clkevt_next_event() compensates for the timer stop/start\nsynchronization delay by programming evt - TIMER_SYNC_TICKS into the\nhardware interval register. The clockevent device currently advertises\nTIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed\nto call set_next_event() with evt == TIMER_SYNC_TICKS.\n\nThat programs a zero-tick interval. With oneshot/highres/nohz timer\noperation this can leave the next event stuck, which was observed as a\nboot hang on Allwinner D1 after the clockevents core started reusing\nforced minimum-delta events.\n\nAdvertise one extra tick instead, so the smallest event accepted by the\ncore still programs at least one hardware tick after the synchronization\ncompensation."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"0cc4b14d7401d50e53a01f1554147ee075ee6943","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"53a3bc024b8e5d284468cce84957cded5f859f98","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"753a220084dfc4d737f2ab9eaddc9a01a397edd7","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"151eb52f8712017c8f7b00bb2305e8916cb9e3dc","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"bf38be01d43c4e4ca903aff7236d8486a950a252","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"f0efafcdf6eec1f3361bfd8c811420198f55c8bb","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","status":"affected","lessThan":"d21808328225ab8cee46885bf9a0dffcefbe630e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/clocksource/timer-sun4i.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.13","versionType":"semver"},{"version":"5.10.270","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.221","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.188","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.109","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.50","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.4","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/clocksource/timer-sun4i.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/0cc4b14d7401d50e53a01f1554147ee075ee6943"},{"url":"https://git.kernel.org/stable/c/53a3bc024b8e5d284468cce84957cded5f859f98"},{"url":"https://git.kernel.org/stable/c/753a220084dfc4d737f2ab9eaddc9a01a397edd7"},{"url":"https://git.kernel.org/stable/c/ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44"},{"url":"https://git.kernel.org/stable/c/151eb52f8712017c8f7b00bb2305e8916cb9e3dc"},{"url":"https://git.kernel.org/stable/c/bf38be01d43c4e4ca903aff7236d8486a950a252"},{"url":"https://git.kernel.org/stable/c/f0efafcdf6eec1f3361bfd8c811420198f55c8bb"},{"url":"https://git.kernel.org/stable/c/d21808328225ab8cee46885bf9a0dffcefbe630e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-19T09:07:31.003Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"5.10.270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"5.15.221"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"6.1.188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"6.6.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"6.12.109"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"6.18.50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"7.2.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"7.3"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}