Skip to main content

Linux Kernel EUVDEUVD-2026-55515

| CVE-2026-68134 HIGH
2026-08-10 Linux GHSA-6q8g-f67g-jgcc
7.3
CVSS 3.1 · Vendor: Linux
Share

Severity by source

Vendor (Linux) PRIMARY
7.3 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
vuln.today AI
7.1 HIGH

AV:L and PR:L reflect mandatory local authenticated access on s390x hardware; I:N applied because the flaw is a missing read/check rather than a write path; C:H and A:H retained for hardware state disclosure and kernel panic potential.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
4.7 MEDIUM
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 14, 2026 - 02:28 vuln.today
CVSS changed
Aug 13, 2026 - 23:37 NVD
7.3 (HIGH)
Patch available
Aug 10, 2026 - 14:18 EUVD
CVE Published
Aug 10, 2026 - 11:58 cve.org
UNKNOWN (no severity yet)
CVE Published
Aug 10, 2026 - 11:58 cve.org
HIGH 7.3

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ptp: ptp_s390: Add missing facility check

Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available.

AnalysisAI

Missing hardware facility validation in the Linux kernel's ptp_s390 driver exposes IBM System z (s390x) mainframes to potential kernel crashes and hardware register state disclosure when the driver registers the physical clock without confirming that Facility 28 is installed and that PTFF QPT is available. The vulnerability affects kernel versions from commit 2d7de7a3010d713fb89b7ba99e6fdc14475ad106 through the respective fix commits across multiple stable branches, with patched releases at 6.18.42, 7.1.6, and 7.2-rc5. No public exploit has been identified and EPSS probability stands at 0.17%, consistent with the niche IBM mainframe hardware dependency that sharply constrains the exploitable population.

Technical ContextAI

The ptp_s390 driver implements Precision Time Protocol (PTP) hardware clock support exclusively for IBM System z (s390x) mainframe architecture. On z/Architecture systems, the PTFF (Perform Timing Facility Function) instruction is used to interact with hardware timing facilities; sub-function QAF (Query Available Functions) reports which PTFF operations are available, including QPT (Query Physical Clock). Facility 28 is the z/Architecture timing facility bit that must be present before any timing hardware interaction. The defect is that the driver registers the physical clock device without first confirming via facility 28 presence and a PTFF QAF/QPT availability check. On systems where this hardware capability is absent, subsequent clock access attempts invoke undefined behavior - potentially reading from invalid or uninitialized hardware register states - leading to kernel memory exposure classified under the Information Disclosure tag, or generating processor exception conditions that trigger a kernel panic. The CPE identifier is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*. No CWE was formally assigned; the closest applicable class is CWE-754 (Improper Check for Unusual or Exceptional Conditions), representing a failure to validate hardware prerequisites before proceeding with device registration.

RemediationAI

The primary remediation is to upgrade to a patched Linux kernel version: 6.18.42, 7.1.6, or 7.2-rc5 or later. The upstream fix commits are available at https://git.kernel.org/stable/c/b3efb4744abf493c9782eae713b861a80d9bbeca, https://git.kernel.org/stable/c/545a7fdbc110c82933d448db2695abff07536f08, and https://git.kernel.org/stable/c/e78f1ac37afcb16cb6fef8a2c92591eab6558956. For operators unable to patch immediately, the most targeted compensating control is to unload and blacklist the ptp_s390 module: run 'modprobe -r ptp_s390' and add 'blacklist ptp_s390' to /etc/modprobe.d/blacklist.conf; this eliminates the attack surface entirely at the cost of disabling PTP hardware clock functionality on the s390x host, which may affect time synchronization accuracy for applications relying on hardware timestamping. If PTP clock functionality must remain active, restrict access to /dev/ptp* device nodes to trusted system accounts only and monitor kernel logs for PTFF-related exception messages as an indicator of abnormal access attempts.

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0 Not-Affected

Share

EUVD-2026-55515 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy