7.8

CVE-2026-72357

uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

In the Linux kernel, the following vulnerability has been resolved:

uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

In the unregister path we use __in_uprobe_trampoline check with
current->mm for the VMA lookup, which is wrong, because we are
in the tracer context, not the traced process.

Add mm_struct pointer argument to __in_uprobe_trampoline and
changing related callers to pass proper mm_struct pointer.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ba2bfc97b4629b10bd8d02b36e04f3932a04cac4
Version < c9170c83b0e0fc2065a4c2bca5bf1f90c5880156
Status affected
Version ba2bfc97b4629b10bd8d02b36e04f3932a04cac4
Version < 1acddd3e22dd6912dd5d54f80462405a1f1e6bae
Status affected
Version ba2bfc97b4629b10bd8d02b36e04f3932a04cac4
Version < 169328645663bae30e9abad4012d52441e085a71
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.18
Status affected
Version 0
Version < 6.18
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.071
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c9170c83b0e0fc2065a4c2bca5bf1f90c5880156
https://git.kernel.org/stable/c/1acddd3e22dd6912dd5d54f80462405a1f1e6bae
https://git.kernel.org/stable/c/169328645663bae30e9abad4012d52441e085a71