CVE-2026-89096
MediumCVSS 5.9Summary
A flaw was found in nfs-utils where an unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth.
Risk Assessment
Sustained requests can exhaust system resources, eventually causing the service to degrade or crash. This may disrupt NFS services in the organization.
Recommendation
Update nfs-utils to a version containing the fix and restrict access to rpc.statd from untrusted networks. Monitor memory usage of rpc.statd.
Other vulnerabilities in nfs-utils
See all- CVE-2026-89098Medium
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.
- CVE-2025-12801Medium
A vulnerability was discovered in the rpc.mountd daemon of the nfs-utils package for Linux, allowing an NFSv3 client to escalate privileges assigned in the /etc/exports file at mount time. This enables access to any subdirectory or subtree of an exported directory, regardless of file permissions and 'root_squash' or 'all_squash' attributes.
Original NVD description (English source)
A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS