OESA-2026-4780: libnfs security update
Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fix(es):
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfszdrbytes(), libnfszdrstring(), and libnfszdrarray(). The caller-supplied maxsize value is not honored.(CVE-2026-108985)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/libnfsto a version that resolves this vulnerability.Fixed in 5.0.2-4.oe2403sp4 - Upgrade
Upgrade
libnfsto a version that resolves this vulnerability.Patch 7613236
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or user action?
The vector indicates that no privileges are required, but user interaction is required. The attack is network-reachable and has low attack complexity.
What is the expected impact if the flaw is exploited?
The severity vector indicates high availability impact and low integrity impact. It does not indicate a confidentiality impact.
How can I assess whether my libnfs build is affected?
The issue affects libnfs through version 6.0.2 when the build does not include upstream commit 7613236. Verify the libnfs version and, where available, whether that commit or its vendor backport is present.