Medium WID-SEC-2026-4020 2 CVEs

nfs-utils: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 18, 2026 · Updated Oct 18, 2026 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in nfs-utils ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

nfs-utils sind Teil der Network File System (NFS) Unterstützung für den Linux Kernel.

Vulnerabilities 2

Medium 5.9

CVE-2026-89096

Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback pro…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Oct 16, 2026
Medium 5.5

CVE-2026-89098

Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 16, 2026

Revision history

2026-10-18 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-10-18
https://github.com/advisories/GHSA-VM5M-6M89-C34W
GitHub Advisory Database vom 2026-10-18
https://github.com/advisories/GHSA-7Q29-687Q-4M44
PoC-code für CVE-2026-89098
https://bugzilla.redhat.com/show_bug.cgi?id=2469511
PoC-code für CVE-2026-89096
https://bugzilla.redhat.com/show_bug.cgi?id=2462372