CVE-2026-93210

CVE-2026-93210

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: harden DFS cache against invalid target hints

Currently, get_tgt_name() returns ERR_PTR(-ENOENT) when ce->tgthint is

NULL, and dfs_cache_noreq_update_tgthint() assumes ce->tgthint is always

valid.

In preparation for clearing ce->tgthint in free_tgts(), harden callers

of get_tgt_name() against ERR_PTR results and harden

dfs_cache_noreq_update_tgthint() against NULL pointer dereferences.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-09-24T20:17Z
References (6)
https://git.kernel.org/stable/c/66dbcdbb0cadffd12eb8f2b115fd57d384c5109d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6cb7f9fed8f40f28fbd464ca99c946951afc0952 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7e32da6047d9afdae8dd17b87b4c8d97363c4ee2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/846f0709559b9e27024e126a80bc7afb76516912 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a48328afbc3f63e3b9de8827e2e16c15b17976f7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf86c08123c6ab8c61cc0be1dad7540db93738ff · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:10Z
    smb: client: harden DFS cache against invalid target hints
    cvelistv5