# tracing: Fix crash passing ERR_PTR to kthread_stop()

CVE record · `CVE-2026-89749`

- **Identifiers:** `CVE-2026-89749`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before c1a4fb7aa290f158d50654d640292e49d9055fd1` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 42ccb215ef0a552acbbd32f81009bfe4b278ba77` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 98d06fb9865a490e12ebe32d65b9ffac6108614d` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before ceb1707aef5824cf024eb82d10787b7621e2ff35` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 12a499f741fc5be3731c8b0a0d909406575cc2eb` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before adadf4192f700bca82abfda9fa6d58c0bf37cc04` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before c40e0b4fa365969e67011529eabdfb66d1022256` (git)
  - affected: `e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 649bc7df3e5d7be6f7996a95084037dbf3cad1e5` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.31`
  - unaffected: `before 2.6.31` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-89749](https://www.cve.org/CVERecord?id=CVE-2026-89749)
- [NVD: CVE-2026-89749](https://nvd.nist.gov/vuln/detail/CVE-2026-89749)

### References from the CNA

- <https://git.kernel.org/stable/c/c1a4fb7aa290f158d50654d640292e49d9055fd1>
- <https://git.kernel.org/stable/c/42ccb215ef0a552acbbd32f81009bfe4b278ba77>
- <https://git.kernel.org/stable/c/98d06fb9865a490e12ebe32d65b9ffac6108614d>
- <https://git.kernel.org/stable/c/ceb1707aef5824cf024eb82d10787b7621e2ff35>
- <https://git.kernel.org/stable/c/12a499f741fc5be3731c8b0a0d909406575cc2eb>
- <https://git.kernel.org/stable/c/adadf4192f700bca82abfda9fa6d58c0bf37cc04>
- <https://git.kernel.org/stable/c/c40e0b4fa365969e67011529eabdfb66d1022256>
- <https://git.kernel.org/stable/c/649bc7df3e5d7be6f7996a95084037dbf3cad1e5>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-89749>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-89749/>. Everything for agents: <https://agentprime.io/llms.txt>.