Privilege Escalation Vulnerability in nfs-utils Package
Summary
ALSA-2026:3940: Moderate: nfs-utils security update. Affects libnfsidmap versions < 1:2.5.4-38.el9_7.3. Fixed in 1:2.5.4-38.el9_7.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfs-utils package provides essential tools and a daemon for the kernel Network File System (NFS) server, enabling efficient file sharing across networks. It includes utilities like mount.nfs, umount.nfs, and showmount, which are critical for managing NFS shares. This package is widely used in Linux environments, particularly in enterprise settings, to enhance performance compared to traditional NFS implementations. However, vulnerabilities in nfs-utils can lead to significant security risks, including unauthorized access and privilege escalation.
Vulnerability Detail
The vulnerability identified as CVE-2025-12801 affects the rpc.mountd component of the nfs-utils package. This flaw allows an attacker to exploit the privilege escalation vulnerability, potentially gaining unauthorized access to system resources. The ramifications of this vulnerability can be severe, as it may enable attackers to execute arbitrary code with elevated privileges, compromising the integrity and security of the affected systems. It is crucial to address this vulnerability promptly to mitigate risks associated with unauthorized access.
How To Fix
Minimum fixed version
1:2.5.4-38.el9_7.3
This is the first release that contains the fix.
sudo dnf update libnfsidmapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the rpc.mountd service by configuring firewall rules to limit connections to trusted IP addresses only. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The nfs-utils package is critical for NFS functionality in Linux environments, but it is currently affected by a privilege escalation vulnerability (CVE-2025-12801). It is essential to update to the patched version to safeguard your systems against potential exploitation. Implementing temporary workarounds can help mitigate risks until the update is applied.
See every vulnerability recorded for libnfsidmap →
FAQ
nfs-utils is a collection of programs that provide support for the Network File System (NFS) on Linux, allowing users to share files over a network.
CVE-2025-12801 is a security vulnerability in the rpc.mountd component of the nfs-utils package that allows for privilege escalation.
You can use Vulert, a tool that monitors open-source vulnerabilities in your software, by simply uploading your manifest file like package-lock.json. Visit Vulert Scanner to check your application without any signup.
If immediate updates are not possible, consider implementing firewall rules to restrict access to the rpc.mountd service as a temporary workaround.
For detailed information, refer to the CVE page associated with CVE-2025-12801, which provides insights into the impact and mitigation strategies.
Related vulnerabilities
Recent vulnerabilities recorded for libnfsidmap.
