AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72357

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A vulnerability exists in the Linux kernel related to the improper use of the `mm_struct` in the `__in_uprobe_trampoline` function, which can lead to incorrect virtual memory area (VMA) lookups during the unregister process. This flaw could potentially allow an attacker to exploit the tracer context, affecting the integrity of the system's memory management. Organizations using Linux systems, particularly those employing dynamic tracing or debugging tools, should prioritize addressing this vulnerability to mitigate potential exploitation risks.

CVE
CVE-2026-72357
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.