Red Hat Security AdvisoryRHSA-2026:3940
nfs-utils security update
Released 2026-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nfs-utils-coreos-1:2.5.4-38.el9_7.3, nfsv4-client-utils-1:2.5.4-38.el9_7.3
- Red Hat Enterprise Linux BaseOS (v. 9) libnfsidmap-1:2.5.4-38.el9_7.3, nfs-utils-1:2.5.4-38.el9_7.3
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libnfsidmap-devel-1:2.5.4-38.el9_7.3
Fixes 1 record
Priority LOW 29
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00514 · Published 2026-03-04 · Partial fix · 1:2.8.3-0.el10_1.3, 1:2.3.3-68.el8_10 +8 CWE-279
