CVE-2026-90066samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify ftrace_direct_multi_init() assigns kthread_run()'s return value to simple_tsk without an IS_ERR() check. When kthread_run() fails it returns ERR_PTR(-ENOMEM), but init still returns 0, so the module loads with simple_tsk holding an error pointer. On unload, ftrace_direct_multi_exit() then passes that ERR_PTR to kthread_stop(), leading to a null-pointer-dereference. Check the return value of kthread_run() with IS_ERR(); on failure, unregister the ftrace direct call and propagate the error code.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e1067a07cfbc5a36abad3752fafe4c79e06db1bb before 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830; from e1067a07cfbc5a36abad3752fafe4c79e06db1bb before 98b7b2a29ae87937aa02ab9391543ef8c602cd94; from e1067a07cfbc5a36abad3752fafe4c79e06db1bb before 626614df9080d7052fbe24dc90b5434717ab7a9f; from e1067a07cfbc5a36abad3752fafe4c79e06db1bb before cf839636911d8313f3ecd098329fd0b96499e4cf; from e1067a07cfbc5a36abad3752fafe4c79e06db1bb before 6727b7618f49401acf373fa3ec5712e2ec52e5cf | CNA record |
References
- https://git.kernel.org/stable/c/7a96b9f6d5ba23dbce66c8a4a242effd4c01a830
- https://git.kernel.org/stable/c/98b7b2a29ae87937aa02ab9391543ef8c602cd94
- https://git.kernel.org/stable/c/626614df9080d7052fbe24dc90b5434717ab7a9f
- https://git.kernel.org/stable/c/cf839636911d8313f3ecd098329fd0b96499e4cf
- https://git.kernel.org/stable/c/6727b7618f49401acf373fa3ec5712e2ec52e5cf
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.