Riskcovery

CVE-2026-72357

uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process.

Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ba2bfc97b4629b10bd8d02b36e04f3932a04cac4 to before c9170c83b0e0fc2065a4c2bca5bf1f90c5880156Affected
  • ba2bfc97b4629b10bd8d02b36e04f3932a04cac4 to before 1acddd3e22dd6912dd5d54f80462405a1f1e6baeAffected
  • ba2bfc97b4629b10bd8d02b36e04f3932a04cac4 to before 169328645663bae30e9abad4012d52441e085a71Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.