Linux Kernel Kthread Creation Error Handling Vulnerability

CVE-2026-98147

What is CVE-2026-98147?

A vulnerability exists in the Linux kernel related to error handling during the creation of kernel threads. Specifically, the use of WARN_ON() in the context of kthread_run() failures has been improperly implemented. When a thread creation operation fails due to the SIGKILL signal, the expected return value is -EINTR, which should not trigger an immediate warning. This oversight can lead to misleading warning messages and complicate debugging processes for system administrators. It is essential to apply the latest updates to mitigate this issue and maintain system integrity.

References