Live › vulnerability › CVE-2026-89098
Go to dashboardThe fsidd daemon in nfs-utils trusts assertions to check arguments received on its local domain socket. A local user who sends a request with required arguments missing can trigger an assertion failure that crashes the daemon until it is restarted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running nfs-utils with the fsidd daemon, where local users can reach its local domain socket. The sources do not name affected versions or default configuration.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.
This page as .md · .json · in your agent: get_signal("CVE-2026-89098")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.