CVE record · CVE-2026-89749

tracing: Fix crash passing ERR_PTR to kthread_stop()

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before c1a4fb7aa290f158d50654d640292e49d9055fd1 git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 42ccb215ef0a552acbbd32f81009bfe4b278ba77 git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 98d06fb9865a490e12ebe32d65b9ffac6108614d git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before ceb1707aef5824cf024eb82d10787b7621e2ff35 git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 12a499f741fc5be3731c8b0a0d909406575cc2eb git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before adadf4192f700bca82abfda9fa6d58c0bf37cc04 git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before c40e0b4fa365969e67011529eabdfb66d1022256 git
  • affected e6187007d6c365b551c69ea3df46f06fd1c8bd19 to before 649bc7df3e5d7be6f7996a95084037dbf3cad1e5 git
Other versions: unaffected
Linux Linux
  • affected 2.6.31
  • unaffected before 2.6.31 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.109 to 6.12.*, inclusive semver
  • unaffected 6.18.50 to 6.18.*, inclusive semver
  • unaffected 7.2.4 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89749
CNA
Linux
Published
11 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.