CVE-2025-12801

Published: Mar 4, 2026

Modified: Apr 2, 2026

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10	unaffected `1:2.8.3-0.el10_1.3 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `1:2.3.3-68.el8_10 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `1:2.5.4-38.el9_7.3 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `1:2.5.4-38.el9_7.3 - < *`
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected `1:2.5.4-26.el9_4.3 - < *`
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected `1:2.5.4-34.el9_6.3 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.16	unaffected `416.94.202603231244-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.17	unaffected `417.94.202603242359-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.18	unaffected `418.94.202603181125-0 - < *`
Red Hat	Red Hat OpenShift Container Platform 4.19	unaffected `4.19.9.6.202603251941-0 - < *`
Red Hat	Red Hat Ceph Storage 8	unaffected `sha256:1160569002c25d3d349bbe41b57eeffade438853d3419edca01813227440f414 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions