This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-89098 →
Categories
DEBIAN-CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to ver...

Original description

The description as published by the source.

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 nfs-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13 nfs-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14 nfs-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.1-1"}]}]

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details