Important: rpcbind security update
Summary
ALSA-2026:83562: Important: rpcbind security update. Affects rpcbind versions < 1.2.6-7.el9_8.1. Fixed in 1.2.6-7.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
The rpcbind utility is a server that converts Remote Procedure Call (RPC) program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine.
Security Fix(es):
- rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service (CVE-2026-94640)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
How To Fix
Minimum fixed version
1.2.6-7.el9_8.1
This is the first release that contains the fix.
sudo dnf update rpcbindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Related vulnerabilities
Recent vulnerabilities recorded for rpcbind.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
