In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

If the mmio_pipe_open() fails to find a PCI device, the hiter->dev
will be assigned to NULL. The mmiotrace read() function dereferences the
hiter->dev if hiter exists.

Change the test of the read to not only check hiter being NULL, but also
the hiter->dev before dereferencing it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f984b51e0779a6dd30feedc41404013ca54e5d05 affected < faaf95135184208ee3ac6f33175c8d1800669dfc
f984b51e0779a6dd30feedc41404013ca54e5d05 affected < 201a01102c529772168181190cb084471082cf5c
f984b51e0779a6dd30feedc41404013ca54e5d05 affected < 8464427e1c177809a9488a97dfa2807d9dcf323b
f984b51e0779a6dd30feedc41404013ca54e5d05 affected < 724cd84b0546c07806840fa658714488553d13a2
f984b51e0779a6dd30feedc41404013ca54e5d05 affected < 144f29e85702234b23d2a62abf723e6a17eb5427
Linux Linux affected
Version Status Constraints
2.6.27 affected —
0 unaffected < 2.6.27
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/144f29e85702234b23d2a62abf723e6a17eb5427 cve-icon
https://git.kernel.org/stable/c/201a01102c529772168181190cb084471082cf5c cve-icon
https://git.kernel.org/stable/c/724cd84b0546c07806840fa658714488553d13a2 cve-icon
https://git.kernel.org/stable/c/8464427e1c177809a9488a97dfa2807d9dcf323b cve-icon
https://git.kernel.org/stable/c/faaf95135184208ee3ac6f33175c8d1800669dfc cve-icon
History

Mon, 10 Aug 2026 19:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
Title tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T11:59:47.298Z

Reserved: 2026-07-30T09:28:09.372Z

Link: CVE-2026-68176

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T18:45:17Z

Weaknesses