CVE-2026-72357 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
A logic error in Linux kernel uprobes handling can cause a null pointer dereference, leading to a system crash or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72357?
CVE-2026-72357 is a high-severity vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
In the unregister path we use __in_uprobe_trampoline check with current->mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process.
Add mm_struct pointer argument to __in_uprobe_trampoline and changing related callers to pass proper mm_struct pointer.
Which versions are affected by CVE-2026-72357?
How do I fix CVE-2026-72357?
Apply the vendor's patch.
Is CVE-2026-72357 being exploited?
There is no known exploitation of CVE-2026-72357 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72357, DEBIAN-CVE-2026-72357, GHSA-hfv7-f5x8-pgrv, UBUNTU-CVE-2026-72357.