AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68176

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically in the mmiotrace functionality, where a NULL dereference can occur if the mmio_pipe_open() function fails to locate a PCI device. This flaw could lead to potential system crashes or instability when the mmiotrace read() function attempts to dereference a NULL pointer. Organizations using Linux systems, particularly those relying on PCI devices and mmiotrace for tracing operations, should prioritize applying the patch to mitigate the risk of crashes.

CVE
CVE-2026-68176
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.