p PatchFirst

CVE-2026-89098

CVE-2026-89098 · Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

CVSS 5.5 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • red hat openshift container platform 4

    No fix published

  • nfs-utils Debian:12

    Versions
    • 1:2.6.2-4
    • 1:2.6.2-4+deb12u1
    • 1:2.6.3-1
    • 1:2.6.3-1~exp1
    • 1:2.6.3-2
    • 1:2.6.3-3
    • 1:2.6.3-4~exp1
    • 1:2.6.4-1
    • 1:2.6.4-1~exp1
    • 1:2.6.4-2
    • 1:2.6.4-3
    • 1:2.6.4-4
    • 1:2.6.4-5
    • 1:2.6.4-6
    • 1:2.7.1-1
    • 1:2.7.1-1~exp1
    • 1:2.7.1-2
    • 1:2.7.1-3
    • 1:2.8.1-1
    • 1:2.8.1-1~exp1
    • 1:2.8.1-2
    • 1:2.8.2-1
    • 1:2.8.2-2
    • 1:2.8.2-2~exp1
    • 1:2.8.2-3
    • 1:2.8.3-1
    • 1:2.8.3-1~exp1
    • 1:2.8.4-1
    • 1:2.8.4-2
    • 1:2.8.5-1
    • 1:2.8.6-1
    • 1:2.8.7-1
    • 1:2.9.1-1
    • 1:2.9.2-1
    • 1:3.1.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Debian:13

    Versions
    • 1:2.8.3-1
    • 1:2.8.4-1
    • 1:2.8.4-2
    • 1:2.8.5-1
    • 1:2.8.6-1
    • 1:2.8.7-1
    • 1:2.9.1-1
    • 1:2.9.2-1
    • 1:3.1.1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Debian:14

    Versions
    • 1:2.8.3-1
    • 1:2.8.4-1
    • 1:2.8.4-2
    • 1:2.8.5-1
    • 1:2.8.6-1
    • 1:2.8.7-1
    • 1:2.9.1-1
    • 1:2.9.2-1
    Affected ranges
    • ECOSYSTEM: < 1:3.1.1-1

    Update to 1:3.1.1-1

  • nfs-utils Ubuntu:14.04:LTS

    Versions
    • 1:1.2.8-2ubuntu2
    • 1:1.2.8-4ubuntu1
    • 1:1.2.8-5ubuntu1
    • 1:1.2.8-6ubuntu1
    • 1:1.2.8-6ubuntu1.1
    • 1:1.2.8-6ubuntu1.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:16.04:LTS

    Versions
    • 1:1.2.8-9ubuntu10
    • 1:1.2.8-9ubuntu11
    • 1:1.2.8-9ubuntu12
    • 1:1.2.8-9ubuntu12.1
    • 1:1.2.8-9ubuntu12.2
    • 1:1.2.8-9ubuntu12.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:18.04:LTS

    Versions
    • 1:1.3.4-2.1ubuntu2
    • 1:1.3.4-2.1ubuntu4
    • 1:1.3.4-2.1ubuntu5
    • 1:1.3.4-2.1ubuntu5.1
    • 1:1.3.4-2.1ubuntu5.2
    • 1:1.3.4-2.1ubuntu5.3
    • 1:1.3.4-2.1ubuntu5.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:20.04:LTS

    Versions
    • 1:1.3.4-2.5ubuntu2
    • 1:1.3.4-2.5ubuntu3
    • 1:1.3.4-2.5ubuntu3.1
    • 1:1.3.4-2.5ubuntu3.3
    • 1:1.3.4-2.5ubuntu3.4
    • 1:1.3.4-2.5ubuntu3.5
    • 1:1.3.4-2.5ubuntu3.6
    • 1:1.3.4-2.5ubuntu3.7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:22.04:LTS

    Versions
    • 1:1.3.4-6ubuntu1
    • 1:2.6.1-1~exp1ubuntu1
    • 1:2.6.1-1ubuntu1
    • 1:2.6.1-1ubuntu1.1
    • 1:2.6.1-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:24.04:LTS

    Versions
    • 1:2.6.3-3ubuntu1
    • 1:2.6.4-3ubuntu3
    • 1:2.6.4-3ubuntu4
    • 1:2.6.4-3ubuntu5
    • 1:2.6.4-3ubuntu5.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:26.10

    Versions
    • 1:2.8.5-1ubuntu1
    • 1:2.9.1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • nfs-utils Ubuntu:26.04:LTS

    Versions
    • 1:2.8.3-1ubuntu3
    • 1:2.8.4-1ubuntu1
    • 1:2.8.5-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →