Skip to content
OpenAdvisories

Description

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat OpenShift Container Platform 4 — —
Red Hat Red Hat OpenShift Container Platform 5 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nfs-utils 1:3.1.1-1 —
Debian 13 nfs-utils No fix yet —
Debian 12 nfs-utils No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 nfs-utils No fix yet —
Ubuntu 26.04 LTS nfs-utils No fix yet —
Ubuntu 24.04 LTS nfs-utils No fix yet —
Ubuntu 22.04 LTS nfs-utils No fix yet —
Ubuntu 20.04 LTS nfs-utils No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS nfs-utils No fix yet —
Ubuntu 16.04 LTS nfs-utils No fix yet —
Ubuntu 14.04 LTS nfs-utils No fix yet —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 nfs-utils 2.6.4-5 —

Advisories 1

References