CVE-2026-80689

tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Sep 14, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions

mmio_trace_rw() and mmio_trace_mapping() retrieve mmio_trace_array into tr and pass it to __trace_mmiotrace_rw() and __trace_mmiotrace_map(). If these functions are invoked while mmio_trace_array is NULL (e.g. before initialization or after disabled), accessing tr->array_buffer.buffer will result in a NULL pointer dereference crash.

Fix this by adding an explicit NULL check for tr at the beginning of __trace_mmiotrace_rw() and __trace_mmiotrace_map().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before dc1b1a057b3bb901f83433700e604fe0ae67c5f2Affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 6aee2d478545c089dd5d055d3c9f0c7ea034fb80Affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 4e4ab09db7899d7f2d2293a18adf0fa200a27e73Affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 2df964d141270c40f07547b0c2e0a51e2573d46dAffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 876014b4eeb927146430e7591cf959a7ceb8d64aAffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before a20a0010eb6485f60cd64e15ebc85a4bd388642eAffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 60234845142fddb27db89ebc00a65178421fb3a4Affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to before 12b80cdbc54cf615b4717a4e8180063408091ea2Affected
LinuxLinux
  • 2.6.27Affected
  • before 2.6.27Not affected
  • 5.10.270 through 5.10.*Not affected
  • 5.15.221 through 5.15.*Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.103 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.