CVE-2026-68176
Description
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
How to fix
- Linux Linuxc06470320f8156306986a831010cdc9f9f87cb50, 0d5aaf91a3d05f7f993401af27872a5fc0f26edc, 3635a9e8b453e658a49b39d025f35bbc6e58d0e2, faaf95135184208ee3ac6f33175c8d1800669dfc, 201a01102c529772168181190cb084471082cf5c, 8464427e1c177809a9488a97dfa2807d9dcf323b, 724cd84b0546c07806840fa658714488553d13a2, 144f29e85702234b23d2a62abf723e6a17eb5427 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < c06470320f8156306986a831010cdc9f9f87cb50, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 0d5aaf91a3d05f7f993401af27872a5fc0f26edc, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 3635a9e8b453e658a49b39d025f35bbc6e58d0e2, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < faaf95135184208ee3ac6f33175c8d1800669dfc, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 201a01102c529772168181190cb084471082cf5c, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 8464427e1c177809a9488a97dfa2807d9dcf323b, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 724cd84b0546c07806840fa658714488553d13a2, f984b51e0779a6dd30feedc41404013ca54e5d05 ≤ v < 144f29e85702234b23d2a62abf723e6a17eb5427, 2.6.27 | c06470320f8156306986a831010cdc9f9f87cb50, 0d5aaf91a3d05f7f993401af27872a5fc0f26edc, 3635a9e8b453e658a49b39d025f35bbc6e58d0e2, faaf95135184208ee3ac6f33175c8d1800669dfc, 201a01102c529772168181190cb084471082cf5c, 8464427e1c177809a9488a97dfa2807d9dcf323b, 724cd84b0546c07806840fa658714488553d13a2, 144f29e85702234b23d2a62abf723e6a17eb5427 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.