Red Hat Product Errata RHSA-2026:3938 - Security Advisory
Issued:
2026-03-05
Updated:
2026-03-05

RHSA-2026:3938 - Security Advisory

Synopsis

Moderate: nfs-utils security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for nfs-utils is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.

Security Fix(es):

  • nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2413081 - CVE-2025-12801 nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Red Hat Enterprise Linux for x86_64 8

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
x86_64
libnfsidmap-2.3.3-68.el8_10.i686.rpm SHA-256: 5e85d4805fdc8b08c697aaf68db216e115fa1a95f9b49968bdf0da3f13ad07a0
libnfsidmap-2.3.3-68.el8_10.x86_64.rpm SHA-256: 630e4c2274ebdddf1de3d2efb1a9f23b674d0783fe213f27813aa7554bbdf18a
libnfsidmap-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: 5316aab6792d866f7fe280d4af194f486b9f28e26f12c8419604740798ca3407
libnfsidmap-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: d6a453b4735b1ce71b2c90ae07a36e54216e0fc6552336c6e261478cd730371f
nfs-utils-2.3.3-68.el8_10.x86_64.rpm SHA-256: b56ff5af6aaa74f2dd4ca3c14770949a9e2c972264b50e809c284c162226a2d1
nfs-utils-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: adffef2d572645d111dafd83e88087f73cb29cdcd9b8bba3d7716bc5ea8e0c2c
nfs-utils-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: bc67a7e8f16972f55d3512852cbe9c866f3345f016901ebc3787329eeeed97c2
nfs-utils-debugsource-2.3.3-68.el8_10.i686.rpm SHA-256: ce5f5caf7f12a8eb8dbb8ef75a21111af06a75552d058393f5cb902185ac463a
nfs-utils-debugsource-2.3.3-68.el8_10.x86_64.rpm SHA-256: 8ee12a3a00e1208621da58f1ec58cc84f13e40a6d5ff555f6ad4ccf157b26981

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
s390x
libnfsidmap-2.3.3-68.el8_10.s390x.rpm SHA-256: e898a0988519721b6f5a40c0975db9856f7bd2d2031366948c4151276364e338
libnfsidmap-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: ad2b7d25dc20045dd12943e9c14b36503ee8a8b336600c7538faf5a5d4d449ed
nfs-utils-2.3.3-68.el8_10.s390x.rpm SHA-256: c6b2442bff19b921fc5af456c8a4dd7990bb837ebefe7c9d5945bd7ca9df1c38
nfs-utils-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: eaa07c948bb1b76f75f45223239a1683a999ebe71287e72944a747b8767f0523
nfs-utils-debugsource-2.3.3-68.el8_10.s390x.rpm SHA-256: cdba6ebdcb9f5aee5c1c768ad4cde66b6dfd89de2c0295488fb249fd01acc563

Red Hat Enterprise Linux for Power, little endian 8

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
ppc64le
libnfsidmap-2.3.3-68.el8_10.ppc64le.rpm SHA-256: ef8946cab79649f1e18fa68f4065bd00f100b91962a3c5c195aa0c3068d8ea0b
libnfsidmap-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 2b7db3651592fc672b134d9f8de0c3dd4b17695bfc120b96da043b18ca5e8800
nfs-utils-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 65e99f000330785aaef90d0e68bc49712ae7ffdfe79bd45b37214b15062fe3a9
nfs-utils-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 69fda56cf8b3b4159a1533d3d5e38067e8c42a4f8c33c808b6368419eb0f7ad7
nfs-utils-debugsource-2.3.3-68.el8_10.ppc64le.rpm SHA-256: ef66a2df033f26849ce118298096e0edf153fe8899ef14bcdfaca9eb9888623e

Red Hat Enterprise Linux for ARM 64 8

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
aarch64
libnfsidmap-2.3.3-68.el8_10.aarch64.rpm SHA-256: 3c8a8742304b64f941ea8de1a4a3e9b69a3c6e41daf5e17bebf7d2e520087785
libnfsidmap-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: d3dda7805a7fd44fe7576025fd4af2dbf7b9d69bc0753fd0f6ed3e3bec960e6c
nfs-utils-2.3.3-68.el8_10.aarch64.rpm SHA-256: ea65a5a9d9d5ccc1ca4514d1dfa243bd2c703a72dec3e6a1d53385dd752a3e35
nfs-utils-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: 6392af0d7e7a12be42fe1c06cbd17bebc1267ac318082ff670e888021e86ce4d
nfs-utils-debugsource-2.3.3-68.el8_10.aarch64.rpm SHA-256: 362c0d113f556b15deceb48f6738f006ee9bdfa22ccab6383c01e3dd7014b240

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
libnfsidmap-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: 5316aab6792d866f7fe280d4af194f486b9f28e26f12c8419604740798ca3407
libnfsidmap-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: d6a453b4735b1ce71b2c90ae07a36e54216e0fc6552336c6e261478cd730371f
libnfsidmap-devel-2.3.3-68.el8_10.i686.rpm SHA-256: 963da37bb4ec7e79aa40924f06f8b1231eecb592ef35cf62a0e893d63504d4a4
libnfsidmap-devel-2.3.3-68.el8_10.x86_64.rpm SHA-256: 53ce0763eba196a38573bb60a1e3f6f79ddffc4c4fdfacfeb5dac11024e77787
nfs-utils-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: adffef2d572645d111dafd83e88087f73cb29cdcd9b8bba3d7716bc5ea8e0c2c
nfs-utils-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: bc67a7e8f16972f55d3512852cbe9c866f3345f016901ebc3787329eeeed97c2
nfs-utils-debugsource-2.3.3-68.el8_10.i686.rpm SHA-256: ce5f5caf7f12a8eb8dbb8ef75a21111af06a75552d058393f5cb902185ac463a
nfs-utils-debugsource-2.3.3-68.el8_10.x86_64.rpm SHA-256: 8ee12a3a00e1208621da58f1ec58cc84f13e40a6d5ff555f6ad4ccf157b26981

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
libnfsidmap-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 2b7db3651592fc672b134d9f8de0c3dd4b17695bfc120b96da043b18ca5e8800
libnfsidmap-devel-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 9b3713f299d340501d745a5d7ec326a8ddb420e04c64c77c644835aa8df0722e
nfs-utils-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 69fda56cf8b3b4159a1533d3d5e38067e8c42a4f8c33c808b6368419eb0f7ad7
nfs-utils-debugsource-2.3.3-68.el8_10.ppc64le.rpm SHA-256: ef66a2df033f26849ce118298096e0edf153fe8899ef14bcdfaca9eb9888623e

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
libnfsidmap-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: d3dda7805a7fd44fe7576025fd4af2dbf7b9d69bc0753fd0f6ed3e3bec960e6c
libnfsidmap-devel-2.3.3-68.el8_10.aarch64.rpm SHA-256: 67e0f7af3842481c867ded0392d76ef96eacc432982c7ca99795f09e5bc76ce1
nfs-utils-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: 6392af0d7e7a12be42fe1c06cbd17bebc1267ac318082ff670e888021e86ce4d
nfs-utils-debugsource-2.3.3-68.el8_10.aarch64.rpm SHA-256: 362c0d113f556b15deceb48f6738f006ee9bdfa22ccab6383c01e3dd7014b240

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
libnfsidmap-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: ad2b7d25dc20045dd12943e9c14b36503ee8a8b336600c7538faf5a5d4d449ed
libnfsidmap-devel-2.3.3-68.el8_10.s390x.rpm SHA-256: 93358d10cfe0a75a9640270f945de70447b98cd8bfaab6d90975a95473ff56b4
nfs-utils-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: eaa07c948bb1b76f75f45223239a1683a999ebe71287e72944a747b8767f0523
nfs-utils-debugsource-2.3.3-68.el8_10.s390x.rpm SHA-256: cdba6ebdcb9f5aee5c1c768ad4cde66b6dfd89de2c0295488fb249fd01acc563

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
x86_64
libnfsidmap-2.3.3-68.el8_10.i686.rpm SHA-256: 5e85d4805fdc8b08c697aaf68db216e115fa1a95f9b49968bdf0da3f13ad07a0
libnfsidmap-2.3.3-68.el8_10.x86_64.rpm SHA-256: 630e4c2274ebdddf1de3d2efb1a9f23b674d0783fe213f27813aa7554bbdf18a
libnfsidmap-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: 5316aab6792d866f7fe280d4af194f486b9f28e26f12c8419604740798ca3407
libnfsidmap-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: d6a453b4735b1ce71b2c90ae07a36e54216e0fc6552336c6e261478cd730371f
nfs-utils-2.3.3-68.el8_10.x86_64.rpm SHA-256: b56ff5af6aaa74f2dd4ca3c14770949a9e2c972264b50e809c284c162226a2d1
nfs-utils-debuginfo-2.3.3-68.el8_10.i686.rpm SHA-256: adffef2d572645d111dafd83e88087f73cb29cdcd9b8bba3d7716bc5ea8e0c2c
nfs-utils-debuginfo-2.3.3-68.el8_10.x86_64.rpm SHA-256: bc67a7e8f16972f55d3512852cbe9c866f3345f016901ebc3787329eeeed97c2
nfs-utils-debugsource-2.3.3-68.el8_10.i686.rpm SHA-256: ce5f5caf7f12a8eb8dbb8ef75a21111af06a75552d058393f5cb902185ac463a
nfs-utils-debugsource-2.3.3-68.el8_10.x86_64.rpm SHA-256: 8ee12a3a00e1208621da58f1ec58cc84f13e40a6d5ff555f6ad4ccf157b26981

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
aarch64
libnfsidmap-2.3.3-68.el8_10.aarch64.rpm SHA-256: 3c8a8742304b64f941ea8de1a4a3e9b69a3c6e41daf5e17bebf7d2e520087785
libnfsidmap-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: d3dda7805a7fd44fe7576025fd4af2dbf7b9d69bc0753fd0f6ed3e3bec960e6c
nfs-utils-2.3.3-68.el8_10.aarch64.rpm SHA-256: ea65a5a9d9d5ccc1ca4514d1dfa243bd2c703a72dec3e6a1d53385dd752a3e35
nfs-utils-debuginfo-2.3.3-68.el8_10.aarch64.rpm SHA-256: 6392af0d7e7a12be42fe1c06cbd17bebc1267ac318082ff670e888021e86ce4d
nfs-utils-debugsource-2.3.3-68.el8_10.aarch64.rpm SHA-256: 362c0d113f556b15deceb48f6738f006ee9bdfa22ccab6383c01e3dd7014b240

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
ppc64le
libnfsidmap-2.3.3-68.el8_10.ppc64le.rpm SHA-256: ef8946cab79649f1e18fa68f4065bd00f100b91962a3c5c195aa0c3068d8ea0b
libnfsidmap-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 2b7db3651592fc672b134d9f8de0c3dd4b17695bfc120b96da043b18ca5e8800
nfs-utils-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 65e99f000330785aaef90d0e68bc49712ae7ffdfe79bd45b37214b15062fe3a9
nfs-utils-debuginfo-2.3.3-68.el8_10.ppc64le.rpm SHA-256: 69fda56cf8b3b4159a1533d3d5e38067e8c42a4f8c33c808b6368419eb0f7ad7
nfs-utils-debugsource-2.3.3-68.el8_10.ppc64le.rpm SHA-256: ef66a2df033f26849ce118298096e0edf153fe8899ef14bcdfaca9eb9888623e

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
nfs-utils-2.3.3-68.el8_10.src.rpm SHA-256: ce384620d31b797b1095c8cc3888ccf242aee4b67ce0cfea8bcc59eefa6a2fa6
s390x
libnfsidmap-2.3.3-68.el8_10.s390x.rpm SHA-256: e898a0988519721b6f5a40c0975db9856f7bd2d2031366948c4151276364e338
libnfsidmap-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: ad2b7d25dc20045dd12943e9c14b36503ee8a8b336600c7538faf5a5d4d449ed
nfs-utils-2.3.3-68.el8_10.s390x.rpm SHA-256: c6b2442bff19b921fc5af456c8a4dd7990bb837ebefe7c9d5945bd7ca9df1c38
nfs-utils-debuginfo-2.3.3-68.el8_10.s390x.rpm SHA-256: eaa07c948bb1b76f75f45223239a1683a999ebe71287e72944a747b8767f0523
nfs-utils-debugsource-2.3.3-68.el8_10.s390x.rpm SHA-256: cdba6ebdcb9f5aee5c1c768ad4cde66b6dfd89de2c0295488fb249fd01acc563

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.