CVE-2026-93212: Linux kernel · nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in f4776c1c4b38fbc459420321c8ece87d0f7f95fb : update Linux kernel when convenient.
Data as of 26 Oct 2026, 15:59 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in f4776c1c4b38fbc459420321c8ece87d0f7f95fb, 766170b4fd2daaf5c4d6735560101474e18edab6, 59baf45a06435194005fc5fa9a42d89f77a30432 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to f4776c1c4b38fbc459420321c8ece87d0f7f95fb, 766170b4fd2daaf5c4d6735560101474e18edab6, 59baf45a06435194005fc5fa9a42d89f77a30432 or 9f1ddfc8cb9076592401a611eb3a44d36186d014.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available in the Linux kernel as indicated by the fixed commit versions. Users should update to the patched kernel versions containing the fix identified by the commits f4776c1c4b38fbc459420321c8ece87d0f7f95fb, 766170b4fd2daaf5c4d6735560101474e18edab6, 59baf45a06435194005fc5fa9a42d89f77a30432, and 9f1ddfc8cb9076592401a611eb3a44d36186d014. No additional mitigation steps are necessary.
Description
A vulnerability in the Linux kernel's NFS daemon (nfsd) was fixed to prevent a NULL pointer dereference in the nfsd_file_net_dispose function. This issue occurs during per-network namespace teardown when the nfsd service pointer is cleared before the filecache shutdown, potentially causing the service thread to dereference a NULL pointer. The fix involves adding a guard to ensure the service pointer is non-NULL before calling svc_wake_up().
References
- git.kernel.org/stable/c/f4776c1c4b38fbc459420321c8ece87d0f7f95fb (opens in a new tab)
- git.kernel.org/stable/c/59baf45a06435194005fc5fa9a42d89f77a30432 (opens in a new tab)
- git.kernel.org/stable/c/766170b4fd2daaf5c4d6735560101474e18edab6 (opens in a new tab)
- git.kernel.org/stable/c/9f1ddfc8cb9076592401a611eb3a44d36186d014 (opens in a new tab)