{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-93219",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-93219"
  ],
  "published": "2026-09-24T15:10:53Z",
  "summary": "clocksource/drivers/timer-sun4i: Advertise a real minimum delta",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource/drivers/timer-sun4i: Advertise a real minimum delta\n\nsun4i_clkevt_next_event() compensates for the timer stop/start\nsynchronization delay by programming evt - TIMER_SYNC_TICKS into the\nhardware interval register. The clockevent device currently advertises\nTIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed\nto call set_next_event() with evt == TIMER_SYNC_TICKS.\n\nThat programs a zero-tick interval. With oneshot/highres/nohz timer\noperation this can leave the next event stuck, which was observed as a\nboot hang on Allwinner D1 after the clockevents core started reusing\nforced minimum-delta events.\n\nAdvertise one extra tick instead, so the smallest event accepted by the\ncore still programs at least one hardware tick after the synchronization\ncompensation.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.188",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93219"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/0cc4b14d7401d50e53a01f1554147ee075ee6943"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/53a3bc024b8e5d284468cce84957cded5f859f98"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/753a220084dfc4d737f2ab9eaddc9a01a397edd7"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/151eb52f8712017c8f7b00bb2305e8916cb9e3dc"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/bf38be01d43c4e4ca903aff7236d8486a950a252"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f0efafcdf6eec1f3361bfd8c811420198f55c8bb"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/d21808328225ab8cee46885bf9a0dffcefbe630e"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-09-24T15:10:53Z"
  }
}