Summary
The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.
Security Fix(es):
* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libnfsidmap | 1:2.5.4-38.el9_7.3 |
| AlmaLinux · 9 | libnfsidmap-devel | 1:2.5.4-38.el9_7.3 |
| AlmaLinux · 9 | nfs-utils | 1:2.5.4-38.el9_7.3 |
| AlmaLinux · 9 | nfs-utils-coreos | 1:2.5.4-38.el9_7.3 |
| AlmaLinux · 9 | nfsv4-client-utils | 1:2.5.4-38.el9_7.3 |
Vulnerabilities 1
-
Medium 6.5
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any…