CVE-2026-68176

A flaw was found in the Linux kernel's mmiotrace component. When mmio_pipe_open() fails to find a PCI device, a null pointer is assigned to hiter->dev. The mmiotrace read() function then attempts to dereference this null pointer, which can lead to a system crash and result in a denial of service. A local attacker could potentially exploit this to cause system instability.

This issue affects the mmiotrace tracer when no PCI device is found during pipe open. hiter->dev is set to NULL but later dereferenced on read. Systems not using mmiotrace are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.