Privilege Escalation Vulnerability in nfs-utils Package: Security Update Required
Summary
ALSA-2026:3938: Moderate: nfs-utils security update. Affects libnfsidmap versions < 1:2.3.3-68.el8_10. Fixed in 1:2.3.3-68.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfs-utils package provides essential tools and a daemon for the kernel Network File System (NFS) server, enhancing performance over traditional Linux NFS servers. It includes utilities such as mount.nfs, umount.nfs, and showmount, which are crucial for managing NFS mounts. This package is widely used in environments that require network file sharing and management.
Vulnerability Detail
The vulnerability identified as CVE-2025-12801 affects the rpc.mountd component of the nfs-utils package, allowing for privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges on the system, potentially leading to unauthorized access and control over sensitive data and system functions. The flaw arises from improper handling of certain requests, making it critical to address promptly.
How To Fix
Minimum fixed version
1:2.3.3-68.el8_10
This is the first release that contains the fix.
sudo dnf update libnfsidmapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider restricting access to the rpc.mountd service or implementing firewall rules to limit exposure until the package can be updated. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The nfs-utils package has a critical vulnerability (CVE-2025-12801) that allows for privilege escalation. It is essential to update to the patched version 1:2.3.3-68.el8_10 to mitigate risks. Temporary workarounds can be applied, but they should not replace a proper update.
See every vulnerability recorded for libnfsidmap →
FAQ
nfs-utils is a collection of programs and daemons that facilitate the use of the Network File System (NFS) on Linux, allowing for network-based file sharing.
CVE-2025-12801 is a privilege escalation vulnerability in the rpc.mountd component of nfs-utils, which could allow attackers to gain elevated privileges.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If immediate updates are not possible, implement temporary workarounds such as restricting access to rpc.mountd or applying firewall rules to limit exposure.
For detailed information about the security issue and the update, refer to the CVE page associated with CVE-2025-12801.
Related vulnerabilities
Recent vulnerabilities recorded for libnfsidmap.
