Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Red Hat NFS Utilities Security Update
published 8 months ago
Summary
A security update is available for Red Hat's NFS utilities. This update fixes a weakness that could allow an attacker to access unauthorized data. If left unpatched, an attacker could potentially exploit this weakness to gain access to sensitive information.
What to do
- Update redhat libnfsidmap to version 1:2.5.4-38.el9_7.3.
- Update redhat libnfsidmap-debuginfo to version 1:2.5.4-38.el9_7.3.
- Update redhat libnfsidmap-devel to version 1:2.5.4-38.el9_7.3.
- Update redhat nfs-utils to version 1:2.5.4-38.el9_7.3.
- Update redhat nfs-utils-coreos to version 1:2.5.4-38.el9_7.3.
- Update redhat nfs-utils-coreos-debuginfo to version 1:2.5.4-38.el9_7.3.
- Update redhat nfs-utils-debuginfo to version 1:2.5.4-38.el9_7.3.
- Update redhat nfs-utils-debugsource to version 1:2.5.4-38.el9_7.3.
- Update redhat nfsv4-client-utils to version 1:2.5.4-38.el9_7.3.
- Update redhat nfsv4-client-utils-debuginfo to version 1:2.5.4-38.el9_7.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | libnfsidmap |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | libnfsidmap-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | libnfsidmap-devel |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfs-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfs-utils-coreos |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfs-utils-coreos-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfs-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfs-utils-debugsource |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfsv4-client-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | nfsv4-client-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | libnfsidmap |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | libnfsidmap-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | libnfsidmap-devel |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfs-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfs-utils-coreos |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfs-utils-coreos-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfs-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfs-utils-debugsource |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfsv4-client-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::baseos | redhat | nfsv4-client-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | libnfsidmap |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | libnfsidmap-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | libnfsidmap-devel |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfs-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfs-utils-coreos |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfs-utils-coreos-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfs-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfs-utils-debugsource |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfsv4-client-utils |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
| Red Hat:enterprise_linux:9::crb | redhat | nfsv4-client-utils-debuginfo |
< 1:2.5.4-38.el9_7.3 Fix: upgrade to 1:2.5.4-38.el9_7.3
|
Original advisory text
Red Hat Security Advisory: nfs-utils security update
References
- https://access.redhat.com/errata/RHSA-2026:3940 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2413081 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3940.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-12801 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-12801 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12801 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published6 Mar 2026
Updated7 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2026:3940 · OSV
Track software like this
Free during beta