CVE-2026-93211

A flaw was found in the nfsd component of the Linux kernel. Due to an incorrect initialization order of the Dynamic Resource Cache (DRC) hash table, a system crash (Denial of Service) can occur on weakly-ordered architectures like ARM64 and PowerPC. This happens when a shrinker scan attempts to access the hash table before its bucket list heads are fully initialized, leading to a null pointer dereference.

This vulnerability is rated as Moderate impact because it requires a precise race condition during cache initialization under memory reclaim pressure, affects only weakly-ordered hardware architectures (such as ARM64 and PowerPC), and is limited to causing a local kernel crash without compromising confidentiality or integrity. The in-kernel NFS server is not enabled by default in standard Red Hat Enterprise Linux deployments. Systems that do not act as NFS servers or that operate on strongly-ordered architectures such as x86_64 are not vulnerable to this failure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.