CVE-2026-80689 PUBLISHED

tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions

Assigner: Linux
Reserved: 26.08.2026 Published: 28.08.2026 Updated: 28.08.2026

In the Linux kernel, the following vulnerability has been resolved:

tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions

mmio_trace_rw() and mmio_trace_mapping() retrieve mmio_trace_array into tr and pass it to __trace_mmiotrace_rw() and __trace_mmiotrace_map(). If these functions are invoked while mmio_trace_array is NULL (e.g. before initialization or after disabled), accessing tr->array_buffer.buffer will result in a NULL pointer dereference crash.

Fix this by adding an explicit NULL check for tr at the beginning of __trace_mmiotrace_rw() and __trace_mmiotrace_map().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 876014b4eeb927146430e7591cf959a7ceb8d64a (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to a20a0010eb6485f60cd64e15ebc85a4bd388642e (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 60234845142fddb27db89ebc00a65178421fb3a4 (excl.)
  • affected from f984b51e0779a6dd30feedc41404013ca54e5d05 to 12b80cdbc54cf615b4717a4e8180063408091ea2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.27 is affected
  • unaffected from 0 to 2.6.27 (excl.)
  • unaffected from 6.12.103 to 6.12.* (incl.)
  • unaffected from 6.18.44 to 6.18.* (incl.)
  • unaffected from 7.1.8 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References