Answer in brief
CVE-2026-68176 records a Unknown severity vulnerability in tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f984b51e0779a6dd30feedc41404013ca54e5d05 <faaf95135184208ee3ac6f33175c8d1800669dfc || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <201a01102c529772168181190cb084471082cf5c || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <8464427e1c177809a9488a97dfa2807d9dcf323b || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <724cd84b0546c07806840fa658714488553d13a2 || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <144f29e85702234b23d2a62abf723e6a17eb5427 | faaf95135184208ee3ac6f33175c8d1800669dfc, 201a01102c529772168181190cb084471082cf5c, 8464427e1c177809a9488a97dfa2807d9dcf323b, 724cd84b0546c07806840fa658714488553d13a2, 144f29e85702234b23d2a62abf723e6a17eb5427 |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68176 records a Unknown severity vulnerability in tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f984b51e0779a6dd30feedc41404013ca54e5d05 <faaf95135184208ee3ac6f33175c8d1800669dfc || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <201a01102c529772168181190cb084471082cf5c || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <8464427e1c177809a9488a97dfa2807d9dcf323b || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <724cd84b0546c07806840fa658714488553d13a2 || >=f984b51e0779a6dd30feedc41404013ca54e5d05 <144f29e85702234b23d2a62abf723e6a17eb5427 | faaf95135184208ee3ac6f33175c8d1800669dfc, 201a01102c529772168181190cb084471082cf5c, 8464427e1c177809a9488a97dfa2807d9dcf323b, 724cd84b0546c07806840fa658714488553d13a2, 144f29e85702234b23d2a62abf723e6a17eb5427 |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL. The mmiotrace read() function dereferences the hiter->dev if hiter exists. Change the test of the read to not only check hiter being NULL, but also the hiter->dev before dereferencing it.
Quoted source text, attributed separately from HOL analysis.