-

CVE-2026-89749

tracing: Fix crash passing ERR_PTR to kthread_stop()

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix crash passing ERR_PTR to kthread_stop()

event_test_stuff() calls kthread_run() and unconditionally passes the
returned task_struct pointer to kthread_stop(). kthread_run() returns an
error pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for
example under memory pressure during the boot-time event self-test.
kthread_stop() then dereferences the invalid pointer, crashing the kernel.

Check the result of kthread_run() before passing it to kthread_stop(). Use
WARN_ON() so that a failure to create the self-test thread does not go
unnoticed, matching the ring-buffer self-test fix in commit
91542863abad ("ring-buffer: Fix crash passing ERR_PTR to kthread_stop()").
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < c1a4fb7aa290f158d50654d640292e49d9055fd1
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < 42ccb215ef0a552acbbd32f81009bfe4b278ba77
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < 98d06fb9865a490e12ebe32d65b9ffac6108614d
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < ceb1707aef5824cf024eb82d10787b7621e2ff35
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < 12a499f741fc5be3731c8b0a0d909406575cc2eb
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < adadf4192f700bca82abfda9fa6d58c0bf37cc04
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < c40e0b4fa365969e67011529eabdfb66d1022256
Status affected
Version e6187007d6c365b551c69ea3df46f06fd1c8bd19
Version < 649bc7df3e5d7be6f7996a95084037dbf3cad1e5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.31
Status affected
Version 0
Version < 2.6.31
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.101
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/12a499f741fc5be3731c8b0a0d909406575cc2eb
https://git.kernel.org/stable/c/adadf4192f700bca82abfda9fa6d58c0bf37cc04
https://git.kernel.org/stable/c/c40e0b4fa365969e67011529eabdfb66d1022256
https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5
https://git.kernel.org/stable/c/42ccb215ef0a552acbbd32f81009bfe4b278ba77
https://git.kernel.org/stable/c/98d06fb9865a490e12ebe32d65b9ffac6108614d
https://git.kernel.org/stable/c/c1a4fb7aa290f158d50654d640292e49d9055fd1
https://git.kernel.org/stable/c/ceb1707aef5824cf024eb82d10787b7621e2ff35