{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.8-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  uprobes: Fix NULL pointer dereference in hprobe_expire()  Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clone() path:    BUG: kernel NULL pointer dereference, address: 0000000000000018   Oops: 0002 [#1] SMP NOPTI   RIP: 0010:hprobe_expire   CR2: 0000000000000018   Call Trace:    uprobe_copy_process    copy_process    kernel_clone    __x64_sys_clone    do_syscall_64    entry_SYSCALL_64_after_hwframe  This was found on real hosts on Meta fleet.  I've got the impression that this is what is happening:    CPU 1                          CPU 2 (traced task)   -----                          -------------------                                  hit uprobe, prepare_uretprobe():                                    hprobe LEASED, refcount \u003e= 1   uprobe_unregister()     put_uprobe(): refcount -\u003e 0                                  fork() -\u003e dup_utask()                                    hprobe_expire(hprobe, true)                                      try_get_uprobe() -\u003e NULL                                      get_uprobe(NULL)   \u003c-- Oops  Only take the extra reference when the uprobe is non-NULL; a NULL means it is gone and is the correct value to return.",
  "id": "DEBIAN-CVE-2026-74477",
  "modified": "2026-09-14T16:47:48.281890310Z",
  "published": "2026-08-15T13:17:52.497Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-74477"
    }
  ],
  "upstream": [
    "CVE-2026-74477"
  ]
}