# CVE-2026-93207

Linux kernel SUNRPC GSS dangling pointer/use-after-free leading to kernel memory exposure or RCE.

- Page: https://www.vulneraibility.com/cve/CVE-2026-93207
- CVSS: 9.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.47% (percentile 40.7)
- Published: 2026-09-24

## Affected versions

- Linux: affected >= b0bc53470d1af01f62a0fe2d405cf56477804863 and < 56b29d62017c7dd1718d060dd5b3a2ce61095d0c; >= b0bc53470d1af01f62a0fe2d405cf56477804863 and < 0e18641708eaa8bc3c1ff338cd844aeadbd52bac; >= b0bc53470d1af01f62a0fe2d405cf56477804863 and < e0778464049b0238f2915a40007a4154f86cf351; >= b0bc53470d1af01f62a0fe2d405cf56477804863 and < 0fa8a8acae57e6373962741d5b06d13f44aba6a9; >= b0bc53470d1af01f62a0fe2d405cf56477804863 and < 11539e8fcce0b0af062ae5fecf7b3676c2f7aeed; 6.3; fixed in < 6.3, >= 6.6.157 and <= 6.6.*, >= 6.12.109 and <= 6.12.*, >= 6.18.50 and <= 6.18.*, >= 7.2.4 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote SUNRPC GSS requests can leave dangling pointers/stale lengths causing kernel memory disclosure, crashes, or potential remote code execution.

## Action

Immediate action required

## Recommendation

Apply kernel patches or vendor updates immediately; restart affected RPC services.

## References

- [other] https://git.kernel.org/stable/c/56b29d62017c7dd1718d060dd5b3a2ce61095d0c
- [other] https://git.kernel.org/stable/c/0e18641708eaa8bc3c1ff338cd844aeadbd52bac
- [other] https://git.kernel.org/stable/c/e0778464049b0238f2915a40007a4154f86cf351
- [other] https://git.kernel.org/stable/c/0fa8a8acae57e6373962741d5b06d13f44aba6a9
- [other] https://git.kernel.org/stable/c/11539e8fcce0b0af062ae5fecf7b3676c2f7aeed

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.