RLSA-2026:3940

Synopsis

Moderate: nfs-utils security update

Description

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.

Security Fix(es):

* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2413081

CVEs

CVE-2025-12801

Affected packages

Rocky Linux 9 ppc64le - CRB

libnfsidmap-devel-1:2.5.4-38.el9_7.3.ppc64le.rpm

Rocky Linux 9 s390x - CRB

libnfsidmap-devel-1:2.5.4-38.el9_7.3.s390x.rpm

Rocky Linux 9 x86_64 - CRB

libnfsidmap-devel-1:2.5.4-38.el9_7.3.x86_64.rpm libnfsidmap-devel-1:2.5.4-38.el9_7.3.i686.rpm

Rocky Linux 9 aarch64 - BaseOS

nfs-utils-1:2.5.4-38.el9_7.3.aarch64.rpm libnfsidmap-1:2.5.4-38.el9_7.3.aarch64.rpm libnfsidmap-debuginfo-1:2.5.4-38.el9_7.3.aarch64.rpm nfs-utils-1:2.5.4-38.el9_7.3.src.rpm nfs-utils-debuginfo-1:2.5.4-38.el9_7.3.aarch64.rpm nfs-utils-debugsource-1:2.5.4-38.el9_7.3.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

nfs-utils-1:2.5.4-38.el9_7.3.ppc64le.rpm libnfsidmap-1:2.5.4-38.el9_7.3.ppc64le.rpm libnfsidmap-debuginfo-1:2.5.4-38.el9_7.3.ppc64le.rpm nfs-utils-1:2.5.4-38.el9_7.3.src.rpm nfs-utils-debuginfo-1:2.5.4-38.el9_7.3.ppc64le.rpm nfs-utils-debugsource-1:2.5.4-38.el9_7.3.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

nfs-utils-1:2.5.4-38.el9_7.3.s390x.rpm libnfsidmap-1:2.5.4-38.el9_7.3.s390x.rpm libnfsidmap-debuginfo-1:2.5.4-38.el9_7.3.s390x.rpm nfs-utils-1:2.5.4-38.el9_7.3.src.rpm nfs-utils-debuginfo-1:2.5.4-38.el9_7.3.s390x.rpm nfs-utils-debugsource-1:2.5.4-38.el9_7.3.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

libnfsidmap-1:2.5.4-38.el9_7.3.i686.rpm libnfsidmap-1:2.5.4-38.el9_7.3.x86_64.rpm libnfsidmap-debuginfo-1:2.5.4-38.el9_7.3.i686.rpm libnfsidmap-debuginfo-1:2.5.4-38.el9_7.3.x86_64.rpm nfs-utils-1:2.5.4-38.el9_7.3.src.rpm nfs-utils-1:2.5.4-38.el9_7.3.x86_64.rpm nfs-utils-debuginfo-1:2.5.4-38.el9_7.3.i686.rpm nfs-utils-debuginfo-1:2.5.4-38.el9_7.3.x86_64.rpm nfs-utils-debugsource-1:2.5.4-38.el9_7.3.i686.rpm nfs-utils-debugsource-1:2.5.4-38.el9_7.3.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

libnfsidmap-devel-1:2.5.4-38.el9_7.3.aarch64.rpm

Rocky Linux 9 aarch64 - AppStream

nfs-utils-coreos-1:2.5.4-38.el9_7.3.aarch64.rpm nfs-utils-coreos-debuginfo-1:2.5.4-38.el9_7.3.aarch64.rpm nfsv4-client-utils-1:2.5.4-38.el9_7.3.aarch64.rpm nfsv4-client-utils-debuginfo-1:2.5.4-38.el9_7.3.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

nfs-utils-coreos-1:2.5.4-38.el9_7.3.ppc64le.rpm nfs-utils-coreos-debuginfo-1:2.5.4-38.el9_7.3.ppc64le.rpm nfsv4-client-utils-1:2.5.4-38.el9_7.3.ppc64le.rpm nfsv4-client-utils-debuginfo-1:2.5.4-38.el9_7.3.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

nfs-utils-coreos-1:2.5.4-38.el9_7.3.s390x.rpm nfs-utils-coreos-debuginfo-1:2.5.4-38.el9_7.3.s390x.rpm nfsv4-client-utils-1:2.5.4-38.el9_7.3.s390x.rpm nfsv4-client-utils-debuginfo-1:2.5.4-38.el9_7.3.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

nfs-utils-coreos-1:2.5.4-38.el9_7.3.x86_64.rpm nfs-utils-coreos-debuginfo-1:2.5.4-38.el9_7.3.x86_64.rpm nfsv4-client-utils-1:2.5.4-38.el9_7.3.x86_64.rpm nfsv4-client-utils-debuginfo-1:2.5.4-38.el9_7.3.x86_64.rpm