GHSA-HWHC-M4XQ-F4R2
Vulnerability from github – Published: 2026-09-11 21:31 – Updated: 2026-09-14 15:32In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix crash passing ERR_PTR to kthread_stop()
event_test_stuff() calls kthread_run() and unconditionally passes the returned task_struct pointer to kthread_stop(). kthread_run() returns an error pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for example under memory pressure during the boot-time event self-test. kthread_stop() then dereferences the invalid pointer, crashing the kernel.
Check the result of kthread_run() before passing it to kthread_stop(). Use WARN_ON() so that a failure to create the self-test thread does not go unnoticed, matching the ring-buffer self-test fix in commit 91542863abad ("ring-buffer: Fix crash passing ERR_PTR to kthread_stop()").
{
"affected": [],
"aliases": [
"CVE-2026-89749"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-11T20:20:05Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix crash passing ERR_PTR to kthread_stop()\n\nevent_test_stuff() calls kthread_run() and unconditionally passes the\nreturned task_struct pointer to kthread_stop(). kthread_run() returns an\nerror pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for\nexample under memory pressure during the boot-time event self-test.\nkthread_stop() then dereferences the invalid pointer, crashing the kernel.\n\nCheck the result of kthread_run() before passing it to kthread_stop(). Use\nWARN_ON() so that a failure to create the self-test thread does not go\nunnoticed, matching the ring-buffer self-test fix in commit\n91542863abad (\"ring-buffer: Fix crash passing ERR_PTR to kthread_stop()\").",
"id": "GHSA-hwhc-m4xq-f4r2",
"modified": "2026-09-14T15:32:36Z",
"published": "2026-09-11T21:31:39Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89749"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/12a499f741fc5be3731c8b0a0d909406575cc2eb"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/42ccb215ef0a552acbbd32f81009bfe4b278ba77"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/98d06fb9865a490e12ebe32d65b9ffac6108614d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/adadf4192f700bca82abfda9fa6d58c0bf37cc04"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c1a4fb7aa290f158d50654d640292e49d9055fd1"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c40e0b4fa365969e67011529eabdfb66d1022256"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ceb1707aef5824cf024eb82d10787b7621e2ff35"
}
],
"schema_version": "1.4.0",
"severity": []
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.