Privilege Escalation Vulnerability in nfs-utils Package
Summary
ALSA-2026:3939: Moderate: nfs-utils security update. Affects libnfsidmap versions < 1:2.8.3-0.el10_1.3. Fixed in 1:2.8.3-0.el10_1.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfs-utils package provides essential tools and daemons for the kernel Network File System (NFS) server, enhancing performance compared to traditional Linux NFS servers. It includes utilities such as mount.nfs, umount.nfs, and showmount, which are critical for managing NFS shares. The package is widely used in various Linux distributions, including AlmaLinux, to facilitate file sharing across networks.
Vulnerability Detail
The vulnerability identified as CVE-2025-12801 affects the rpc.mountd component of the nfs-utils package. This flaw allows an attacker to escalate privileges, potentially gaining unauthorized access to sensitive system resources. The issue arises from improper handling of requests, which can be exploited to execute arbitrary commands with elevated privileges. The ramifications of this vulnerability can be severe, leading to data breaches or system compromise.
How To Fix
Minimum fixed version
1:2.8.3-0.el10_1.3
This is the first release that contains the fix.
sudo dnf update libnfsidmapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may restrict access to the rpc.mountd service by configuring firewall rules to limit incoming connections. This can help mitigate the risk of exploitation until the package is updated. For example, you can use the following command to block access:
sudo firewall-cmd --add-rich-rule='rule family=ipv4 source address=<attacker_ip> reject'
Conclusion
The nfs-utils package has a critical vulnerability (CVE-2025-12801) that allows privilege escalation. It is crucial for users to update to the patched version to safeguard their systems. Implementing workarounds can provide temporary relief, but updating is the best long-term solution.
See every vulnerability recorded for libnfsidmap →
FAQ
CVE-2025-12801 is a security vulnerability in the rpc.mountd component of the nfs-utils package that allows privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to unauthorized access to system resources, data breaches, and potential system compromise.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, providing real-time insights.
Related vulnerabilities
Recent vulnerabilities recorded for libnfsidmap.
