CVE-2026-68176

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists.

Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f984b51e0779a6dd30feedc41404013ca54e5d05 to before c06470320f8156306986a831010cdc9f9f87cb50Affected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 0d5aaf91a3d05f7f993401af27872a5fc0f26edcAffected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 3635a9e8b453e658a49b39d025f35bbc6e58d0e2Affected f984b51e0779a6dd30feedc41404013ca54e5d05 to before faaf95135184208ee3ac6f33175c8d1800669dfcAffected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 201a01102c529772168181190cb084471082cf5cAffected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 8464427e1c177809a9488a97dfa2807d9dcf323bAffected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 724cd84b0546c07806840fa658714488553d13a2Affected f984b51e0779a6dd30feedc41404013ca54e5d05 to before 144f29e85702234b23d2a62abf723e6a17eb5427Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

f984b51e0779a6dd30feedc41404013ca54e5d05 to before c06470320f8156306986a831010cdc9f9f87cb50Affected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 0d5aaf91a3d05f7f993401af27872a5fc0f26edcAffected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 3635a9e8b453e658a49b39d025f35bbc6e58d0e2Affected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before faaf95135184208ee3ac6f33175c8d1800669dfcAffected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 201a01102c529772168181190cb084471082cf5cAffected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 8464427e1c177809a9488a97dfa2807d9dcf323bAffected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 724cd84b0546c07806840fa658714488553d13a2Affected
f984b51e0779a6dd30feedc41404013ca54e5d05 to before 144f29e85702234b23d2a62abf723e6a17eb5427Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.