CVE-2026-68092

A flaw was found in the Linux kernel's time/jiffies clocksource. During early boot, the jiffies clocksource is used before it is properly registered, causing its maximum delta value to remain at zero. This issue prevents the system's time from progressing, leading to a significant boot delay, particularly observed in Xen Hardware Virtual Machine (HVM) environments.

This vulnerability is rated as having a Low impact because it only manifests during early system boot and does not allow post-boot user exploitation, privilege escalation, or data compromise. The condition occurs when timekeeping initialization evaluates the uncalibrated jiffies clock before registration completes, which can stall time advancement and cause extended startup latency in specific virtualized guest environments such as Xen HVM. Running systems and standard hardware deployments remain operational, and unprivileged users cannot trigger the issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.