# CVE-2026-93221

Race in Linux nfsd can cause double-free leading to kernel memory corruption and possible RCE.

- Page: https://www.vulneraibility.com/cve/CVE-2026-93221
- CVSS: 8.1
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.42% (percentile 36.3)
- Published: 2026-09-24

## Affected versions

- Linux: affected >= 362063a595be959bc08f4163e6405a0266740091 and < df5922fe09a8131c793ffa86adf204999b0470f8; >= 362063a595be959bc08f4163e6405a0266740091 and < 11a5fe42e1811f793e04ef885b639ea7668f439d; 5.2; fixed in < 5.2, >= 7.2.4 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Concurrent NFS operations can trigger double-free/memory corruption in nfsd, enabling remote code execution or kernel crash (DoS) on NFS servers.

## Action

Immediate action required

## Recommendation

Install vendor/kernel updates for nfsd and reboot NFS servers immediately.

## References

- [other] https://git.kernel.org/stable/c/94b450977c60261903c945419d2df4a464de60c4
- [other] https://git.kernel.org/stable/c/faac245ca739b66e96fb7bb43e21df537239a4e5
- [other] https://git.kernel.org/stable/c/40bab0da844c142431a6b1cc21b4cf53491dac44
- [other] https://git.kernel.org/stable/c/df5922fe09a8131c793ffa86adf204999b0470f8
- [other] https://git.kernel.org/stable/c/11a5fe42e1811f793e04ef885b639ea7668f439d

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.