CVE-2026-53689: Integer Overflow
libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.0.2-2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53689?
The severity of CVE-2026-53689 is rated as high with a score of 7.1.
What is CVE-2026-53689?
CVE-2026-53689 is a vulnerability in libnfs that allows an integer overflow due to lack of string size validation when connecting to a crafted NFS server.
How do I fix CVE-2026-53689?
To fix CVE-2026-53689, update to libnfs version 6.0.2 or later which includes the necessary validation adjustments.
What components are affected by CVE-2026-53689?
The affected component is libnfs versions prior to 6.0.2 before the commit 55c18ea.
What are the potential impacts of CVE-2026-53689?
Exploitation of CVE-2026-53689 could lead to integer overflow, which may result in unexpected behavior or system crashes.