Description
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | autofs | 3.1.4-8 | — |
| Debian 13 | autofs | 3.1.4-8 | — |
| Debian 12 | autofs | 3.1.4-8 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | autofs | 1:5.0.1-0.rc2.55.el5.1 | RHSA-2007:1128 |
| RHEL 4 | autofs5 | 1:5.0.1-0.rc2.55.el4_6.1 | RHSA-2007:1129 |
Advisories 2
- RHSA-2007:1129 Red Hat Security Advisory: autofs5 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:1128 Red Hat Security Advisory: autofs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2007:1129 vendor-advisory
- 26841 vdb-entry
- 28052 third-party-advisory
- 28456 third-party-advisory
- 40441 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=409701
- RHSA-2007:1128 vendor-advisory
- oval:org.mitre.oval:def:10158 vdb-entry signature
- FEDORA-2007-4532 vendor-advisory
- 1019087 vdb-entry
- MDVSA-2008:009 vendor-advisory
- 28097 third-party-advisory
- FEDORA-2007-4469 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=410031