CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftrace_direct_multi_init() function does not properly check the return value of kthread_run(). If kthread_run() fails, an error pointer is assigned, which is later passed to kthread_stop() during module unload. This improper handling can lead to a null-pointer dereference, potentially causing system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.