Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68176

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < c06470320f8156306986a831010cdc9f9f87cb50affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 0d5aaf91a3d05f7f993401af27872a5fc0f26edcaffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 3635a9e8b453e658a49b39d025f35bbc6e58d0e2affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < faaf95135184208ee3ac6f33175c8d1800669dfcaffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 201a01102c529772168181190cb084471082cf5caffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 8464427e1c177809a9488a97dfa2807d9dcf323baffected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 724cd84b0546c07806840fa658714488553d13a2affected
  • f984b51e0779a6dd30feedc41404013ca54e5d05 to < 144f29e85702234b23d2a62abf723e6a17eb5427affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References