CVE-2026-89749tracing: Fix crash passing ERR_PTR to kthread_stop()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run() and unconditionally passes the returned task_struct pointer to kthread_stop(). kthread_run() returns an error pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for example under memory pressure during the boot-time event self-test. kthread_stop() then dereferences the invalid pointer, crashing the kernel. Check the result of kthread_run() before passing it to kthread_stop(). Use WARN_ON() so that a failure to create the self-test thread does not go unnoticed, matching the ring-buffer self-test fix in commit 91542863abad ("ring-buffer: Fix crash passing ERR_PTR to kthread_stop()").
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before c1a4fb7aa290f158d50654d640292e49d9055fd1; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 42ccb215ef0a552acbbd32f81009bfe4b278ba77; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 98d06fb9865a490e12ebe32d65b9ffac6108614d; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before ceb1707aef5824cf024eb82d10787b7621e2ff35; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 12a499f741fc5be3731c8b0a0d909406575cc2eb; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before adadf4192f700bca82abfda9fa6d58c0bf37cc04; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before c40e0b4fa365969e67011529eabdfb66d1022256; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 649bc7df3e5d7be6f7996a95084037dbf3cad1e5 | CNA record |
References
- https://git.kernel.org/stable/c/c1a4fb7aa290f158d50654d640292e49d9055fd1
- https://git.kernel.org/stable/c/42ccb215ef0a552acbbd32f81009bfe4b278ba77
- https://git.kernel.org/stable/c/98d06fb9865a490e12ebe32d65b9ffac6108614d
- https://git.kernel.org/stable/c/ceb1707aef5824cf024eb82d10787b7621e2ff35
- https://git.kernel.org/stable/c/12a499f741fc5be3731c8b0a0d909406575cc2eb
- https://git.kernel.org/stable/c/adadf4192f700bca82abfda9fa6d58c0bf37cc04
- https://git.kernel.org/stable/c/c40e0b4fa365969e67011529eabdfb66d1022256
- https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.