CVE-2026-93210
Received Received - Intake

DFS Cache Hardening in Linux Kernel SMB Client

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, get_tgt_name() returns ERR_PTR(-ENOENT) when ce->tgthint is NULL, and dfs_cache_noreq_update_tgthint() assumes ce->tgthint is always valid. In preparation for clearing ce->tgthint in free_tgts(), harden callers of get_tgt_name() against ERR_PTR results and harden dfs_cache_noreq_update_tgthint() against NULL pointer dereferences.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93210
EUVD
EUVD-2026-85939

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the SMB client component. It involves improper handling of DFS (Distributed File System) cache target hints. The issue occurs when a function returns an error pointer for a missing target hint, but other functions assume the hint is always valid. This can lead to NULL pointer dereferences or invalid memory access when the system tries to use these hints.

Detection Guidance

This vulnerability is specific to the Linux kernel's SMB client DFS cache handling. Detection requires checking kernel logs for SMB-related errors or kernel crashes related to DFS cache operations. Monitor logs with 'dmesg | grep -i smb' or 'journalctl -k | grep -i smb'. If the system is vulnerable, these commands may show NULL pointer dereference errors or invalid target hint warnings.

Impact Analysis

This vulnerability could allow an attacker to cause a denial of service by crashing the system or corrupting kernel memory. It may also enable unauthorized access to sensitive data if exploited to manipulate file system operations. Systems using SMB client functionality are primarily at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a Linux kernel SMB client issue rather than data protection or privacy controls.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve this vulnerability. Monitor vendor advisories for kernel updates addressing this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93210. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart