{"id":"CVE-2026-93210","revision":"c9d26df974664e959d0bba323c6826c3","records":[{"revision":"c9d26df974664e959d0bba323c6826c3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93210","aliases":[],"title":"smb: client: harden DFS cache against invalid target hints","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: harden DFS cache against invalid target hints\n\nCurrently, get_tgt_name() returns ERR_PTR(-ENOENT) when ce->tgthint is\nNULL, and dfs_cache_noreq_update_tgthint() assumes ce->tgthint is always\nvalid.\n\nIn preparation for clearing ce->tgthint in free_tgts(), harden callers\nof get_tgt_name() against ERR_PTR results and harden\ndfs_cache_noreq_update_tgthint() against NULL pointer dereferences.","state":0,"publishedAt":"2026-09-24T15:10:33.577+00:00","modifiedAt":"2026-10-19T09:07:22.393+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/client/dfs_cache.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"a48328afbc3f63e3b9de8827e2e16c15b17976f7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"6cb7f9fed8f40f28fbd464ca99c946951afc0952\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"66dbcdbb0cadffd12eb8f2b115fd57d384c5109d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"846f0709559b9e27024e126a80bc7afb76516912\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"7e32da6047d9afdae8dd17b87b4c8d97363c4ee2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"54be1f6c1c37498bba557049df646cc239fa37e3\",\n                            \"lessThan\": \"bf86c08123c6ab8c61cc0be1dad7540db93738ff\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/client/dfs_cache.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.0\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.109\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.50\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.4\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/a48328afbc3f63e3b9de8827e2e16c15b17976f7","https://git.kernel.org/stable/c/6cb7f9fed8f40f28fbd464ca99c946951afc0952","https://git.kernel.org/stable/c/66dbcdbb0cadffd12eb8f2b115fd57d384c5109d","https://git.kernel.org/stable/c/846f0709559b9e27024e126a80bc7afb76516912","https://git.kernel.org/stable/c/7e32da6047d9afdae8dd17b87b4c8d97363c4ee2","https://git.kernel.org/stable/c/bf86c08123c6ab8c61cc0be1dad7540db93738ff"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93210","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93210","identifiers":["CVE-2026-93210"]},"retained":false,"historicalAffected":[]}],"coverage":[]}