CVE-2026-93210EPSS p6.0%
CVE-2026-93210CVE-2026-93210
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: harden DFS cache against invalid target hints
Currently, get_tgt_name() returns ERR_PTR(-ENOENT) when ce->tgthint is
NULL, and dfs_cache_noreq_update_tgthint() assumes ce->tgthint is always
valid.
In preparation for clearing ce->tgthint in free_tgts(), harden callers
of get_tgt_name() against ERR_PTR results and harden
dfs_cache_noreq_update_tgthint() against NULL pointer dereferences.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 6.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-25 |