Not yet scoredPublished Sep 11, 2026

CVE-2026-89749tracing: Fix crash passing ERR_PTR to kthread_stop()

Updated under an hour ago (Oct 27, 2026, 8:30 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run() and unconditionally passes the returned task_struct pointer to kthread_stop(). kthread_run() returns an error pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for example under memory pressure during the boot-time event self-test. kthread_stop() then dereferences the invalid pointer, crashing the kernel. Check the result of kthread_run() before passing it to kthread_stop(). Use WARN_ON() so that a failure to create the self-test thread does not go unnoticed, matching the ring-buffer self-test fix in commit 91542863abad ("ring-buffer: Fix crash passing ERR_PTR to kthread_stop()").

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before c1a4fb7aa290f158d50654d640292e49d9055fd1; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 42ccb215ef0a552acbbd32f81009bfe4b278ba77; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 98d06fb9865a490e12ebe32d65b9ffac6108614d; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before ceb1707aef5824cf024eb82d10787b7621e2ff35; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 12a499f741fc5be3731c8b0a0d909406575cc2eb; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before adadf4192f700bca82abfda9fa6d58c0bf37cc04; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before c40e0b4fa365969e67011529eabdfb66d1022256; from e6187007d6c365b551c69ea3df46f06fd1c8bd19 before 649bc7df3e5d7be6f7996a95084037dbf3cad1e5	CNA record

References

References

https://git.kernel.org/stable/c/c1a4fb7aa290f158d50654d640292e49d9055fd1
https://git.kernel.org/stable/c/42ccb215ef0a552acbbd32f81009bfe4b278ba77
https://git.kernel.org/stable/c/98d06fb9865a490e12ebe32d65b9ffac6108614d
https://git.kernel.org/stable/c/ceb1707aef5824cf024eb82d10787b7621e2ff35
https://git.kernel.org/stable/c/12a499f741fc5be3731c8b0a0d909406575cc2eb
https://git.kernel.org/stable/c/adadf4192f700bca82abfda9fa6d58c0bf37cc04
https://git.kernel.org/stable/c/c40e0b4fa365969e67011529eabdfb66d1022256
https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.