CVE-2026-90066

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ftrace-direct-multi-modify sample where the ftrace direct multi init() function assigns the return value of kthread run() to the simple tsk variable without performing an IS ERR() check. If kthread run() fails, it returns an ERR PTR(-ENOMEM), but the initialization process still returns 0, allowing the module to load with simple tsk holding an error pointer. During the unload process, ftrace direct multi exit() passes this error pointer to the kthread stop() function, resulting in a null-pointer-dereference. A null-pointer-dereference occurs when a program attempts to read or write to a memory address that is null, typically causing the system to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.