Strix
26.1K

CVE-2026-68176

Unknown

Last modified

CVE-2026-68176 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it..

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f984b51e0779a6dd30feedc41404013ca54e5d05, < faaf95135184208ee3ac6f33175c8d1800669dfc; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 201a01102c529772168181190cb084471082cf5c; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 8464427e1c177809a9488a97dfa2807d9dcf323b; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 724cd84b0546c07806840fa658714488553d13a2; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 144f29e85702234b23d2a62abf723e6a17eb5427
LinuxLinux2.6.27

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68176?
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
How severe is CVE-2026-68176?
Severity scoring for CVE-2026-68176 is pending analysis.
How do I fix CVE-2026-68176?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68176?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST