CVE-2026-72357 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71
https://git.kernel.org/stable/c/1acddd3e22dd6912dd5d54f80462405a1f1e6bae
https://git.kernel.org/stable/c/c9170c83b0e0fc2065a4c2bca5bf1f90c5880156

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.
Title		uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71 https://git.kernel.org/stable/c/1acddd3e22dd6912dd5d54f80462405a1f1e6bae https://git.kernel.org/stable/c/c9170c83b0e0fc2065a4c2bca5bf1f90c5880156

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:55:58.124Z

Updated: 2026-08-15T05:55:58.124Z

Reserved: 2026-08-09T03:40:39.921Z

Link: CVE-2026-72357

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:09.147

Modified: 2026-08-15T06:22:09.147

Link: CVE-2026-72357

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72357", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.921Z", "datePublished": "2026-08-15T05:55:58.124Z", "dateUpdated": "2026-08-15T05:55:58.124Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:55:58.124Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuprobes/x86: Use proper mm_struct in __in_uprobe_trampoline\n\nIn the unregister path we use __in_uprobe_trampoline check with\ncurrent->mm for the VMA lookup, which is wrong, because we are\nin the tracer context, not the traced process.\n\nAdd mm_struct pointer argument to __in_uprobe_trampoline and\nchanging related callers to pass proper mm_struct pointer."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kernel/uprobes.c"], "versions": [{"version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "lessThan": "c9170c83b0e0fc2065a4c2bca5bf1f90c5880156", "status": "affected", "versionType": "git"}, {"version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "lessThan": "1acddd3e22dd6912dd5d54f80462405a1f1e6bae", "status": "affected", "versionType": "git"}, {"version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "lessThan": "169328645663bae30e9abad4012d52441e085a71", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kernel/uprobes.c"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.2-rc2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c9170c83b0e0fc2065a4c2bca5bf1f90c5880156"}, {"url": "https://git.kernel.org/stable/c/1acddd3e22dd6912dd5d54f80462405a1f1e6bae"}, {"url": "https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71"}], "title": "uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/x86/kernel/uprobes.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "c9170c83b0e0fc2065a4c2bca5bf1f90c5880156", "status": "affected", "version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "versionType": "git"}, {"lessThan": "1acddd3e22dd6912dd5d54f80462405a1f1e6bae", "status": "affected", "version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "versionType": "git"}, {"lessThan": "169328645663bae30e9abad4012d52441e085a71", "status": "affected", "version": "ba2bfc97b4629b10bd8d02b36e04f3932a04cac4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/x86/kernel/uprobes.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"lessThan": "6.18", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuprobes/x86: Use proper mm_struct in __in_uprobe_trampoline\n\nIn the unregister path we use __in_uprobe_trampoline check with\ncurrent->mm for the VMA lookup, which is wrong, because we are\nin the tracer context, not the traced process.\n\nAdd mm_struct pointer argument to __in_uprobe_trampoline and\nchanging related callers to pass proper mm_struct pointer."}], "id": "CVE-2026-72357", "lastModified": "2026-08-15T06:22:09.147", "metrics": {}, "published": "2026-08-15T06:22:09.147", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1acddd3e22dd6912dd5d54f80462405a1f1e6bae"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c9170c83b0e0fc2065a4c2bca5bf1f90c5880156"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}