CVE-2026-93212

A flaw was found in the Linux kernel NFS daemon (nfsd). During network teardown, the nfsd_serv pointer is prematurely cleared while the file cache cleanup process is still active. This can lead to a null pointer dereference in the nfsd_file_net_dispose() function. Exploiting this vulnerability could cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated with a Low severity impact on Red Hat Enterprise Linux because exploitation requires a precise race condition during network namespace destruction and only affects hosts actively operating as NFS servers. Standard Red Hat Enterprise Linux installations do not enable kernel NFS server capabilities by default, requiring explicit administrative configuration to expose the affected subsystem. Even on configured servers, triggering the flaw requires specific filecache cleanup timing during teardown, limiting the blast radius to a localized denial of service without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.