SUSE-SU-2026:1356-1

Опубликовано: 15 апр. 2026

Источник: suse-cvrf

Описание

Security update for nfs-utils

This update for nfs-utils fixes the following issue:

Security fixes:

CVE-2025-12801: rpc.mountd allows a NFSv3 client to escalate their privileges and access subdirectories and subtrees of an exported directory (bsc#1259204).

Other fixes:

Split from nfs-utils into its own spec and changelog file (bsc#1246505).
Split legacy libnfsidmap0 into a separate spec file (bsc#1246505).

Список пакетов

Image SLES15-SP6

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Azure-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Azure-Basic

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Azure-Standard

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-BYOS

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-GDC

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-EC2-ECS-HVM

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-BYOS

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-HPC-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Hardened-BYOS

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Hardened-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Hardened-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Hardened-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-Azure-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-BYOS

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAP-Hardened

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-Azure

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-BYOS

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-EC2

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAP-Hardened-GCE

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-SAPCAL

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAPCAL-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAPCAL-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-SAPCAL-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Azure-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Azure-Basic

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Azure-Standard

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-GDC

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP7-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-EC2-ECS-HVM

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-GCE-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-HPC-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-HPC-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-HPC-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-HPC-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Hardened-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Hardened-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-Hardened-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-Azure-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-GCE-3P

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAP-Hardened-Azure

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP7-SAP-Hardened-GCE

libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP7-SAPCAL-Azure

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAPCAL-EC2

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP7-SAPCAL-GCE

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libnfsidmap0-0.26-150600.28.19.1

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-doc-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

nfsidmap-devel-1.0-150600.28.19.1

nfsidmap0-devel-0.26-150600.28.19.1

SUSE Linux Enterprise Server 15 SP6-LTSS

libnfsidmap0-0.26-150600.28.19.1

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-doc-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

nfsidmap-devel-1.0-150600.28.19.1

nfsidmap0-devel-0.26-150600.28.19.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libnfsidmap0-0.26-150600.28.19.1

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-doc-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

nfsidmap-devel-1.0-150600.28.19.1

nfsidmap0-devel-0.26-150600.28.19.1

openSUSE Leap 15.6

libnfsidmap0-0.26-150600.28.19.1

libnfsidmap1-1.0-150600.28.19.1

nfs-client-2.6.4-150600.28.19.1

nfs-doc-2.6.4-150600.28.19.1

nfs-kernel-server-2.6.4-150600.28.19.1

nfsidmap-devel-1.0-150600.28.19.1

nfsidmap0-devel-0.26-150600.28.19.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261356-1/
Link for SUSE-SU-2026:1356-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045560.html
E-Mail link for SUSE-SU-2026:1356-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1246505
SUSE Bug 1246505
https://bugzilla.suse.com/1259204
SUSE Bug 1259204
https://www.suse.com/security/cve/CVE-2025-12801/
SUSE CVE CVE-2025-12801 page

Описание

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

Затронутые продукты

Image SLES15-SP6-Azure-3P:libnfsidmap1-1.0-150600.28.19.1

Image SLES15-SP6-Azure-3P:nfs-client-2.6.4-150600.28.19.1

Image SLES15-SP6-Azure-3P:nfs-kernel-server-2.6.4-150600.28.19.1

Image SLES15-SP6-Azure-Basic:libnfsidmap1-1.0-150600.28.19.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-12801.html
CVE-2025-12801
https://bugzilla.suse.com/1259204
SUSE Bug 1259204