Critical Alert 1 Active Exploit Detected Today

CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

← Back to CVE List

CVE-2026-90066NVD

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved:

samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify

ftrace_direct_multi_init() assigns kthread_run()'s return value to
simple_tsk without an IS_ERR() check. When kthread_run() fails it
returns ERR_PTR(-ENOMEM), but init still returns 0, so the module loads
with simple_tsk holding an error pointer. On unload,
ftrace_direct_multi_exit() then passes that ERR_PTR to kthread_stop(),
leading to a null-pointer-dereference.

Check the return value of kthread_run() with IS_ERR(); on failure,
unregister the ftrace direct call and propagate the error code.
Severity Level
UNKNOWN
Published Date
Sep 17, 2026
Last Modified
Sep 17, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.20%Probability
Root Weakness (CWE)
N/A

Affected & Patched Versions

Affected Versions
  • Linux Linux >= e1067a07cfbc5a36abad3752fafe4c79e06db1bb and < 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830
  • Linux Linux >= e1067a07cfbc5a36abad3752fafe4c79e06db1bb and < 98b7b2a29ae87937aa02ab9391543ef8c602cd94
  • Linux Linux >= e1067a07cfbc5a36abad3752fafe4c79e06db1bb and < 626614df9080d7052fbe24dc90b5434717ab7a9f
  • Linux Linux >= e1067a07cfbc5a36abad3752fafe4c79e06db1bb and < cf839636911d8313f3ecd098329fd0b96499e4cf
  • Linux Linux >= e1067a07cfbc5a36abad3752fafe4c79e06db1bb and < 6727b7618f49401acf373fa3ec5712e2ec52e5cf
  • Linux Linux >= 5.16
Patched Versions
  • Linux Linux 7a96b9f6d5ba23dbce66c8a4a242effd4c01a830
  • Linux Linux 98b7b2a29ae87937aa02ab9391543ef8c602cd94
  • Linux Linux 626614df9080d7052fbe24dc90b5434717ab7a9f
  • Linux Linux cf839636911d8313f3ecd098329fd0b96499e4cf
  • Linux Linux 6727b7618f49401acf373fa3ec5712e2ec52e5cf
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.