CVE-2026-93211

CVE-2026-93211

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialize DRC hash table before registering shrinker

shrinker_register() precedes the INIT_LIST_HEAD loop and the

drc_hashsize store. On weakly-ordered architectures (arm64, ppc),

a shrinker scan can observe drc_hashsize before the bucket list

heads are initialized, causing a NULL deref in the DRC shrinker

callback.

Move bucket initialization and the drc_hashsize store before

shrinker_register() so the hash table is fully initialized before

it becomes visible to the shrinker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2026-09-24T20:17Z
References (4)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:10Z
    nfsd: initialize DRC hash table before registering shrinker
    cvelistv5