CVE-2026-68176: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
If the mmiopipeopen() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists.
Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68176?
The severity of CVE-2026-68176 is rated as risk level 15.
How do I fix CVE-2026-68176?
To fix CVE-2026-68176, ensure your Linux kernel is updated to the latest version where this vulnerability has been resolved.
What impact does CVE-2026-68176 have on systems?
CVE-2026-68176 can lead to a NULL dereference condition in the mmiotrace functionality, potentially causing system instability.
Is CVE-2026-68176 specific to a certain version of the Linux kernel?
CVE-2026-68176 affects multiple versions of the Linux kernel where the mmiotrace functionality is present.
How was CVE-2026-68176 discovered?
CVE-2026-68176 was identified during code analysis of the Linux kernel's tracing components, particularly related to PCI device handling.