All vulnerabilities
CVE-2026-93211

Linux: nfsd: initialize DRC hash table before registering shrinker

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in431c70ca5163c98c746f22f16cd58ca5aefec6dcFixed versionCVE List
Published24 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 431c70ca5163c98c746f22f16cd58ca5aefec6dcLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialize DRC hash table before registering shrinker

shrinker_register() precedes the INIT_LIST_HEAD loop and the drc_hashsize store. On weakly-ordered architectures (arm64, ppc), a shrinker scan can observe drc_hashsize before the bucket list heads are initialized, causing a NULL deref in the DRC shrinker callback.

Move bucket initialization and the drc_hashsize store before shrinker_register() so the hash table is fully initialized before it becomes visible to the shrinker.

Text from CVE List

Affected versions 10

  • Linuxaffected: 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 before f060f43a67635dbb393bf5dcbfc3e8b9a44942cbCVE List
  • Linuxaffected: 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 before b57bd8cb739cb3cf88bdb1a5903a42a707a5c282CVE List
  • Linuxaffected: 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 before 431c70ca5163c98c746f22f16cd58ca5aefec6dcCVE List
  • Linuxaffected: 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 before b0c58934f5cc4f05b63ef6605dd10c1d0d489e88CVE List
  • Linuxaffected: 6.7CVE List
  • Linuxunaffected: all versions before 6.7CVE List
  • Linuxunaffected: 6.12.109 through 6.12.*CVE List
  • Linuxunaffected: 6.18.50 through 6.18.*CVE List
  • Linuxunaffected: 7.2.4 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4