CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

This vulnerability is rated as having Moderate impact by Red Hat Product Security because exploitation is restricted to authenticated local users and solely impacts availability without compromising confidentiality or integrity. In standard Red Hat Enterprise Linux deployments, the fsidd service is not enabled by default and is only utilized in specific configurations supporting NFS re-export operations. Furthermore, the disruption is confined to local FSID resolution handling for re-exported filesystems rather than affecting the broader host operating system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.