CVE-2026-93211

Source
https://cve.org/CVERecord?id=CVE-2026-93211
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93211.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93211
Downstream
Published
2026-09-24T15:10:34Z
Modified
2026-09-25T03:48:52Z
Summary
nfsd: initialize DRC hash table before registering shrinker
Details

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialize DRC hash table before registering shrinker

shrinker_register() precedes the INIT_LIST_HEAD loop and the drc_hashsize store. On weakly-ordered architectures (arm64, ppc), a shrinker scan can observe drc_hashsize before the bucket list heads are initialized, causing a NULL deref in the DRC shrinker callback.

Move bucket initialization and the drc_hashsize store before shrinker_register() so the hash table is fully initialized before it becomes visible to the shrinker.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93211.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8eea99a81c6f67c08fedd7db2ccd09aa93db69a7
Fixed
f060f43a67635dbb393bf5dcbfc3e8b9a44942cb
Fixed
b57bd8cb739cb3cf88bdb1a5903a42a707a5c282
Fixed
431c70ca5163c98c746f22f16cd58ca5aefec6dc
Fixed
b0c58934f5cc4f05b63ef6605dd10c1d0d489e88

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93211.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93211.json"