CVE-2026-93210

A flaw was found in the Linux kernel's Server Message Block (SMB) client Distributed File System (DFS) cache. This vulnerability occurs due to improper handling of invalid target hints, specifically when a null pointer is dereferenced within the dfs_cache_noreq_update_tgthint() function. An attacker could potentially trigger a system crash, leading to a denial of service (DoS).

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires local access on systems configured to mount SMB shares with Distributed File System (DFS) caching. The issue is confined to a null pointer dereference in kernel DFS target hint handling, leading to a system crash rather than arbitrary code execution or data exposure. Furthermore, the SMB client is not engaged by default unless shares are actively mounted, substantially limiting practical exposure in typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.