Riskcovery

CVE-2026-93211

nfsd: initialize DRC hash table before registering shrinker

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialize DRC hash table before registering shrinker

shrinker_register() precedes the INIT_LIST_HEAD loop and the drc_hashsize store. On weakly-ordered architectures (arm64, ppc), a shrinker scan can observe drc_hashsize before the bucket list heads are initialized, causing a NULL deref in the DRC shrinker callback.

Move bucket initialization and the drc_hashsize store before shrinker_register() so the hash table is fully initialized before it becomes visible to the shrinker.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to before f060f43a67635dbb393bf5dcbfc3e8b9a44942cbAffected
  • 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to before b57bd8cb739cb3cf88bdb1a5903a42a707a5c282Affected
  • 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to before 431c70ca5163c98c746f22f16cd58ca5aefec6dcAffected
  • 8eea99a81c6f67c08fedd7db2ccd09aa93db69a7 to before b0c58934f5cc4f05b63ef6605dd10c1d0d489e88Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.