CVE-2026-89749

Source
https://cve.org/CVERecord?id=CVE-2026-89749
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89749.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89749
Downstream
Published
2026-09-11T19:46:53Z
Modified
2026-09-12T11:47:15Z
Summary
tracing: Fix crash passing ERR_PTR to kthread_stop()
Details

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix crash passing ERR_PTR to kthread_stop()

event_test_stuff() calls kthread_run() and unconditionally passes the returned task_struct pointer to kthread_stop(). kthread_run() returns an error pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for example under memory pressure during the boot-time event self-test. kthread_stop() then dereferences the invalid pointer, crashing the kernel.

Check the result of kthread_run() before passing it to kthread_stop(). Use WARN_ON() so that a failure to create the self-test thread does not go unnoticed, matching the ring-buffer self-test fix in commit 91542863abad ("ring-buffer: Fix crash passing ERR_PTR to kthread_stop()").

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89749.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e6187007d6c365b551c69ea3df46f06fd1c8bd19
Fixed
12a499f741fc5be3731c8b0a0d909406575cc2eb
Fixed
adadf4192f700bca82abfda9fa6d58c0bf37cc04
Fixed
c40e0b4fa365969e67011529eabdfb66d1022256
Fixed
649bc7df3e5d7be6f7996a95084037dbf3cad1e5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89749.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.31
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89749.json"