CVE-2026-93229

A flaw was found in the Linux kernel's Network File System daemon (nfsd). A local user can cause a Denial of Service (DoS) or observe inconsistent kernel data on systems with weakly-ordered processor architectures. This issue occurs due to a missing read memory barrier in the Remote Procedure Call (RPC) status reporting mechanism, which allows the processor to reorder read operations while fields are concurrently modified.

This vulnerability is classified as having a Low severity impact because it requires local access, is constrained to weakly-ordered CPU architectures like ARM or POWER, and only leads to transient read inconsistencies in status reporting. In standard Red Hat Enterprise Linux deployments, the kernel NFS server is not enabled by default, significantly limiting the exposure of the affected RPC status netlink interface. Furthermore, strongly-ordered systems such as x86_64 enforce hardware memory ordering and are not susceptible to this reordering flaw. Even when successfully triggered, the issue does not provide unauthorized privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.