CVE-2026-53689

HighCVSS 7.1

Published: 10/06/2026(UTC)Updated: 19/07/2026(UTC)Translated: 20/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A vulnerability in libnfs through version 6.0.2 before commit 55c18ea fails to validate a string size, leading to an integer overflow when connecting to a crafted NFS server. The issue resides in libnfs_zdr_string in lib/libnfs-zdr.c.

Risk Assessment

An attacker can exploit this vulnerability to achieve remote code execution or cause a denial of service (DoS) by sending specially crafted NFS server responses to a client using libnfs.

Recommendation

Immediately update libnfs to a version containing the fix (commit 55c18ea or later). If an update is not possible, restrict trusted NFS connections to verified servers only.

Other vulnerabilities in libnfs

CVE-2026-108985High
ZDR decoding in libnfs through 6.0.2 before commit 7613236 has an out-of-bounds write in lib/libnfs-zdr.c involving libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.

Original NVD description (English source)

libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS