Red Hat Security AdvisoryRHSA-2026:3942
nfs-utils security update
Released 2026-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) libnfsidmap-devel-1:2.5.4-26.el9_4.3
- Red Hat Enterprise Linux AppStream EUS (v.9.4) nfs-utils-coreos-1:2.5.4-26.el9_4.3, nfsv4-client-utils-1:2.5.4-26.el9_4.3
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) libnfsidmap-1:2.5.4-26.el9_4.3, nfs-utils-1:2.5.4-26.el9_4.3
Fixes 1 record
Priority LOW 29
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00514 · Published 2026-03-04 · Partial fix · 1:2.8.3-0.el10_1.3, 1:2.3.3-68.el8_10 +8 CWE-279
