CVE-2026-90066
Description
In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify ftrace_direct_multi_init() assigns kthread_run()'s return value to simple_tsk without an IS_ERR() check. When kthread_run() fails it returns ERR_PTR(-ENOMEM), but init still returns 0, so the module loads with simple_tsk holding an error pointer. On unload, ftrace_direct_multi_exit() then passes that ERR_PTR to kthread_stop(), leading to a null-pointer-dereference. Check the return value of kthread_run() with IS_ERR(); on failure, unregister the ftrace direct call and propagate the error code.
How to fix
- Linux Linux02866f063062dcc5686445c738be003de9787250, 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830, 98b7b2a29ae87937aa02ab9391543ef8c602cd94, 626614df9080d7052fbe24dc90b5434717ab7a9f, cf839636911d8313f3ecd098329fd0b96499e4cf, 6727b7618f49401acf373fa3ec5712e2ec52e5cf or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < 02866f063062dcc5686445c738be003de9787250, e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830, e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < 98b7b2a29ae87937aa02ab9391543ef8c602cd94, e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < 626614df9080d7052fbe24dc90b5434717ab7a9f, e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < cf839636911d8313f3ecd098329fd0b96499e4cf, e1067a07cfbc5a36abad3752fafe4c79e06db1bb ≤ v < 6727b7618f49401acf373fa3ec5712e2ec52e5cf, 5.16 | 02866f063062dcc5686445c738be003de9787250, 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830, 98b7b2a29ae87937aa02ab9391543ef8c602cd94, 626614df9080d7052fbe24dc90b5434717ab7a9f, cf839636911d8313f3ecd098329fd0b96499e4cf, 6727b7618f49401acf373fa3ec5712e2ec52e5cf |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.