{"id":"CVE-2026-93211","revision":"5102ceb46f7347f38c27c08f1b8a2d11","records":[{"revision":"5102ceb46f7347f38c27c08f1b8a2d11","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93211","aliases":[],"title":"nfsd: initialize DRC hash table before registering shrinker","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: initialize DRC hash table before registering shrinker\n\nshrinker_register() precedes the INIT_LIST_HEAD loop and the\ndrc_hashsize store. On weakly-ordered architectures (arm64, ppc),\na shrinker scan can observe drc_hashsize before the bucket list\nheads are initialized, causing a NULL deref in the DRC shrinker\ncallback.\n\nMove bucket initialization and the drc_hashsize store before\nshrinker_register() so the hash table is fully initialized before\nit becomes visible to the shrinker.","state":0,"publishedAt":"2026-09-24T15:10:34.407+00:00","modifiedAt":"2026-10-19T09:07:23.361+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfsd/nfscache.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"8eea99a81c6f67c08fedd7db2ccd09aa93db69a7\",\n                            \"lessThan\": \"f060f43a67635dbb393bf5dcbfc3e8b9a44942cb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8eea99a81c6f67c08fedd7db2ccd09aa93db69a7\",\n                            \"lessThan\": \"b57bd8cb739cb3cf88bdb1a5903a42a707a5c282\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8eea99a81c6f67c08fedd7db2ccd09aa93db69a7\",\n                            \"lessThan\": \"431c70ca5163c98c746f22f16cd58ca5aefec6dc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8eea99a81c6f67c08fedd7db2ccd09aa93db69a7\",\n                            \"lessThan\": \"b0c58934f5cc4f05b63ef6605dd10c1d0d489e88\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/nfsd/nfscache.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.7\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.109\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.50\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.4\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/f060f43a67635dbb393bf5dcbfc3e8b9a44942cb","https://git.kernel.org/stable/c/b57bd8cb739cb3cf88bdb1a5903a42a707a5c282","https://git.kernel.org/stable/c/431c70ca5163c98c746f22f16cd58ca5aefec6dc","https://git.kernel.org/stable/c/b0c58934f5cc4f05b63ef6605dd10c1d0d489e88"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93211","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93211","identifiers":["CVE-2026-93211"]},"retained":false,"historicalAffected":[]}],"coverage":[]}