Vulnerability · Published Mar 4, 2026 · Assigned by redhat
CVE-2025-12801Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
Medium 6.5
In plain English
A medium-severity security flaw in Red Hat Ceph Storage 8 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 56.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | libnfsidmap | 1:2.8.3-0.el10_1.3 | ALSA-2026:3939 |
| AlmaLinux:8 | libnfsidmap | 1:2.3.3-68.el8_10 | ALSA-2026:3938 |
| AlmaLinux:9 | libnfsidmap | 1:2.5.4-38.el9_7.3 | ALSA-2026:3940 |
| AlmaLinux:10 | libnfsidmap-devel | 1:2.8.3-0.el10_1.3 | ALSA-2026:3939 |
| AlmaLinux:8 | libnfsidmap-devel | 1:2.3.3-68.el8_10 | ALSA-2026:3938 |
| AlmaLinux:9 | libnfsidmap-devel | 1:2.5.4-38.el9_7.3 | ALSA-2026:3940 |
| AlmaLinux:10 | nfs-utils | 1:2.8.3-0.el10_1.3 | ALSA-2026:3939 |
| AlmaLinux:8 | nfs-utils | 1:2.3.3-68.el8_10 | ALSA-2026:3938 |
| AlmaLinux:9 | nfs-utils | 1:2.5.4-38.el9_7.3 | ALSA-2026:3940 |
| AlmaLinux:10 | nfs-utils-coreos | 1:2.8.3-0.el10_1.3 | ALSA-2026:3939 |
| AlmaLinux:9 | nfs-utils-coreos | 1:2.5.4-38.el9_7.3 | ALSA-2026:3940 |
| AlmaLinux:10 | nfsv4-client-utils | 1:2.8.3-0.el10_1.3 | ALSA-2026:3939 |
| AlmaLinux:9 | nfsv4-client-utils | 1:2.5.4-38.el9_7.3 | ALSA-2026:3940 |
| Debian:12 | nfs-utils | no fix listed | DEBIAN-CVE-2025-12801 |
| Debian:13 | nfs-utils | no fix listed | DEBIAN-CVE-2025-12801 |
| Debian:14 | nfs-utils | 1:2.8.6-1 | DEBIAN-CVE-2025-12801 |
| Rocky Linux:10 | nfs-utils | 1:2.8.3-0.el10_1.3 | RLSA-2026:3939 |
| Rocky Linux:8 | nfs-utils | 1:2.3.3-68.el8_10 | RLSA-2026:3938 |
| Rocky Linux:9 | nfs-utils | 1:2.5.4-38.el9_7.3 | RLSA-2026:3940 |
| Ubuntu:22.04:LTS | linux | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-aws | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-aws | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-aws-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-aws-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-azure | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-azure | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-fde-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-azure-nvidia-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-gcp | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-gcp | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gcp-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gcp-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-hwe-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-hwe-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-intel-iotg | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-kvm | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-nvidia-bos | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oem-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-oem-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-oracle | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-oracle | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oracle-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-oracle-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-raspi | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-raspi | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-realtime | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:25.10 | linux-riscv | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:26.10 | linux-riscv | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-riscv-6.17 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-riscv-7.0 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-vmware | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:24.04:LTS | linux-xilinx | no fix listed | UBUNTU-CVE-2025-12801 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | no fix listed | UBUNTU-CVE-2025-12801 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | see references |
| Red Hat | Red Hat Ceph Storage 8 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
Weakness: CWE-279 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- RHSA-2026:3938 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:3939 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:3940 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:3941 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:3942 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:5127 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:5606 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:5867 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:5873 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:5877 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-12801 vdb-entry, x_refsource_REDHAT
- RHBZ#2413081 issue-tracking, x_refsource_REDHAT