CVE-2026-68176 PUBLISHED

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists.

Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to faaf95135184208ee3ac6f33175c8d1800669dfc (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 201a01102c529772168181190cb084471082cf5c (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 8464427e1c177809a9488a97dfa2807d9dcf323b (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 724cd84b0546c07806840fa658714488553d13a2 (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 144f29e85702234b23d2a62abf723e6a17eb5427 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.27 is affected
  • unaffected from 0 to 2.6.27 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References