Strix
63.2K

CVE-2026-80689

UnknownEPSS 0.17%

Last modified

CVE-2026-80689 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions mmio_trace_rw() and mmio_trace_mapping() retrieve mmio_trace_array into tr and pass it to __trace_mmiotrace_rw() and __trace_mmiotrace_map(). If these functions are invoked while mmio_trace_array is NULL (e.g. before initialization or after disabled), accessing tr->array_buffer.buffer will result in a NULL pointer dereference crash. Fix this by adding an explicit NULL check for tr at the beginning of __trace_mmiotrace_rw() and __trace_mmiotrace_map().. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions mmio_trace_rw() and mmio_trace_mapping() retrieve mmio_trace_array into tr and pass it to __trace_mmiotrace_rw() and __trace_mmiotrace_map(). If these functions are invoked while mmio_trace_array is NULL (e.g. before initialization or after disabled), accessing tr->array_buffer.buffer will result in a NULL pointer dereference crash. Fix this by adding an explicit NULL check for tr at the beginning of __trace_mmiotrace_rw() and __trace_mmiotrace_map().

Metrics

EPSS Probability
0.17%

6.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f984b51e0779a6dd30feedc41404013ca54e5d05, < dc1b1a057b3bb901f83433700e604fe0ae67c5f2; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 6aee2d478545c089dd5d055d3c9f0c7ea034fb80; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 4e4ab09db7899d7f2d2293a18adf0fa200a27e73; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 2df964d141270c40f07547b0c2e0a51e2573d46d; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 876014b4eeb927146430e7591cf959a7ceb8d64a; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < a20a0010eb6485f60cd64e15ebc85a4bd388642e; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 60234845142fddb27db89ebc00a65178421fb3a4; >= f984b51e0779a6dd30feedc41404013ca54e5d05, < 12b80cdbc54cf615b4717a4e8180063408091ea2
LinuxLinux2.6.27

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80689?
In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions mmio_trace_rw() and mmio_trace_mapping() retrieve mmio_trace_array into tr and pass it to __trace_mmiotrace_rw() and __trace_mmiotrace_map(). If these functions are invoked while mmio_trace_array is NULL (e.g. before initialization or after disabled), accessing tr->array_buffer.buffer will result in a NULL pointer dereference crash. Fix this by adding an explicit NULL check for tr at the beginning of __trace_mmiotrace_rw() and __trace_mmiotrace_map().
How severe is CVE-2026-80689?
Severity scoring for CVE-2026-80689 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80689?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80689?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST