CVE-2026-72357
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, the uprobes mechanism for x86 has a bug where the wrong mm_struct is used in __in_uprobe_trampoline. In the unregister path, current->mm is used instead of the traced process's mm_struct, which is incorrect in the tracer context.
Risk Assessment
The risk includes incorrect uprobes behavior during unregistration, which could lead to errors in debugging or process monitoring, and in extreme cases system crashes.
Recommendation
Apply the patch that adds an mm_struct pointer argument to __in_uprobe_trampoline and passes the proper mm_struct from callers.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.