CVE catalog

CVE-2026-53689

libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.

[CVE catalog]

Severity: High · CVSS 7.1CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Published: Jun 10, 2026, 1:44:28 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.21% · Oct 25, 2026

libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libnfs	sid	`5.0.2-1.1`	fixed
Debian	libnfs	forky	`5.0.2-1.1`	fixed
Debian	libnfs	trixie	`5.0.2-1+deb13u1`	fixed
Debian	libnfs	bookworm	`4.0.0-1`	vulnerable
Debian	libnfs	bookworm-security	`4.0.0-1+deb12u1`	fixed
Cpe	libnfs	Not reported	`5.0.2-1ubuntu0.24.04.1`	fixed
Cpe	libnfs-dev	Not reported	`5.0.2-1ubuntu0.24.04.1`	fixed
Cpe	libnfs-utils	Not reported	`5.0.2-1ubuntu0.24.04.1`	fixed
Cpe	libnfs14	Not reported	`5.0.2-1ubuntu0.24.04.1`	fixed
Cpe	libnfs	Not reported	`4.0.0-1+deb12u1`	fixed
Opensuse	libnfs	tumbleweed	`6.0.2-1.1`	fixed
Suse	libnfs	linux enterprise module for basesystem 15 sp7	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise module for desktop applications 15 sp7	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise high performance computing 15 sp4-espos	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise high performance computing 15 sp4-ltss	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise high performance computing 15 sp5-espos	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise high performance computing 15 sp5-ltss	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server 15 sp4-ltss	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server 15 sp5-ltss	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server 15 sp6-ltss	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server for sap applications 15 sp4	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server for sap applications 15 sp5	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux enterprise server for sap applications 15 sp6	`1.11.0-150000.3.3.1`	fixed
Suse	libnfs	linux micro 6.1	`5.0.2-slfo.1.1_2.1`	fixed
Suse	libnfs	linux enterprise server 16.0	`5.0.3-160000.4.1`	fixed
Suse	libnfs	linux enterprise server for sap applications 16.0	`5.0.3-160000.4.1`	fixed
Opensuse	libnfs	leap 16.0	`5.0.3-160000.4.1`	fixed
Ubuntu	libnfs	22.04	`4.0.0-1`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1build1`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1build2`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1ubuntu0.1`	fixed
Ubuntu	libnfs	24.04	`4.0.0-1build2`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1ubuntu0.24.04.1`	fixed
Ubuntu	libnfs	25.10	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	25.10	`5.0.2-1ubuntu0.25.10.1`	fixed
Ubuntu	libnfs	26.04	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1build2`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1ubuntu1`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1ubuntu1.1`	fixed
Ubuntu	libnfs	16.04	`1.9.7-2`	vulnerable
Ubuntu	libnfs	16.04	`1.9.8-1`	vulnerable
Ubuntu	libnfs	18.04	`1.11.0-2`	vulnerable
Ubuntu	libnfs	18.04	`1.11.0-3`	vulnerable
Ubuntu	libnfs	18.04	`2.0.0-1~exp1`	vulnerable
Ubuntu	libnfs	20.04	`3.0.0-2ubuntu1`	vulnerable
Ubuntu	libnfs	20.04	`4.0.0-1`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1build1`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1build2`	vulnerable
Ubuntu	libnfs	22.04	`4.0.0-1ubuntu0.1`	fixed
Ubuntu	libnfs	24.04	`4.0.0-1build2`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	24.04	`5.0.2-1ubuntu0.24.04.1`	fixed
Ubuntu	libnfs	25.10	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	25.10	`5.0.2-1ubuntu0.25.10.1`	fixed
Ubuntu	libnfs	26.04	`5.0.2-1build1`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1build2`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1ubuntu1`	vulnerable
Ubuntu	libnfs	26.04	`5.0.2-1ubuntu1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libnfs	source	sid	`5.0.2-1.1`	not yet assigned	Not reported	[1139731]
Debian	libnfs	source	forky	`5.0.2-1.1`	not yet assigned	Not reported	[1139731]
Debian	libnfs	source	trixie	`5.0.2-1+deb13u1`	not yet assigned	Not reported	[1139731]
Debian	libnfs	source	bookworm	`4.0.0-1+deb12u1`	not yet assigned	Not reported	[1139731]
Cpe	libnfs	cpe	Not reported	`5.0.2-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Cpe	libnfs-dev	cpe	Not reported	`5.0.2-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Cpe	libnfs-utils	cpe	Not reported	`5.0.2-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Cpe	libnfs14	cpe	Not reported	`5.0.2-1ubuntu0.24.04.1`	Not reported	Not reported	Not reported
Cpe	libnfs	cpe	Not reported	`4.0.0-1+deb12u1`	Not reported	Not reported	Not reported
Opensuse	libnfs	rpm	tumbleweed	`6.0.2-1.1`	Not reported	OPENSUSE-SU-2026:11246-1	Not reported
Suse	libnfs	rpm	linux enterprise module for basesystem 15 sp7	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise module for desktop applications 15 sp7	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise high performance computing 15 sp4-espos	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise high performance computing 15 sp5-espos	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server 15 sp4-ltss	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server 15 sp5-ltss	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server 15 sp6-ltss	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server for sap applications 15 sp4	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server for sap applications 15 sp5	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux enterprise server for sap applications 15 sp6	`1.11.0-150000.3.3.1`	Not reported	SUSE-SU-2026:2760-1	Not reported
Suse	libnfs	rpm	linux micro 6.1	`5.0.2-slfo.1.1_2.1`	Not reported	SUSE-SU-2026:22447-1	Not reported
Suse	libnfs	rpm	linux enterprise server 16.0	`5.0.3-160000.4.1`	Not reported	SUSE-SU-2026:22363-1	Not reported
Suse	libnfs	rpm	linux enterprise server for sap applications 16.0	`5.0.3-160000.4.1`	Not reported	SUSE-SU-2026:22363-1	Not reported
Opensuse	libnfs	rpm	leap 16.0	`5.0.3-160000.4.1`	Not reported	OPENSUSE-SU-2026:21055-1	Not reported
Ubuntu	libnfs	deb	22.04	`4.0.0-1ubuntu0.1`	Not reported	USN-8464-1	Not reported
Ubuntu	libnfs	deb	24.04	`5.0.2-1ubuntu0.24.04.1`	Not reported	USN-8464-1	Not reported
Ubuntu	libnfs	deb	25.10	`5.0.2-1ubuntu0.25.10.1`	Not reported	USN-8464-1	Not reported
Ubuntu	libnfs	deb	26.04	`5.0.2-1ubuntu1.1`	Not reported	USN-8464-1	Not reported
Ubuntu	libnfs	deb	22.04	`4.0.0-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-53689	Not reported
Ubuntu	libnfs	deb	24.04	`5.0.2-1ubuntu0.24.04.1`	Not reported	UBUNTU-CVE-2026-53689	Not reported
Ubuntu	libnfs	deb	25.10	`5.0.2-1ubuntu0.25.10.1`	Not reported	UBUNTU-CVE-2026-53689	Not reported
Ubuntu	libnfs	deb	26.04	`5.0.2-1ubuntu1.1`	Not reported	UBUNTU-CVE-2026-53689	Not reported

[Debian bug #1139731]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libnfs13]Affected
Source package: [libnfs]
Details (4)
- 4.0.0-1 · amd64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1 · arm64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
[libnfs-dev]Affected
Source package: [libnfs]
Details (4)
- 4.0.0-1 · amd64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1 · arm64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
[libnfs-utils]Affected
Source package: [libnfs]
Details (4)
- 4.0.0-1 · amd64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1 · arm64 · bookworm
  Affected · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12
- 4.0.0-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 4.0.0-1+deb12u1
  nvd · libnfs · debian · bookworm; nvd · libnfs · debian · 12

[Debian 13 (Trixie)]

[libnfs14]Affected
Source package: [libnfs]
Details (2)
- 5.0.2-1+b2 · amd64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13
- 5.0.2-1+b2 · arm64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13
[libnfs-dev]Affected
Source package: [libnfs]
Details (2)
- 5.0.2-1+b2 · amd64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13
- 5.0.2-1+b2 · arm64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13
[libnfs-utils]Affected
Source package: [libnfs]
Details (2)
- 5.0.2-1+b2 · amd64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13
- 5.0.2-1+b2 · arm64 · trixie
  Affected · Fixed: 5.0.2-1+deb13u1
  nvd · libnfs · debian · 13

[openSUSE Tumbleweed]

[libnfs16]Unknown
Source package: [libnfs]
Details (1)
- 6.0.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.2-1.1
  Version impact unknown
  nvd · libnfs · opensuse · tumbleweed
[libnfs-devel]Unknown
Source package: [libnfs]
Details (1)
- 6.0.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.2-1.1
  Version impact unknown
  nvd · libnfs · opensuse · tumbleweed
[utils-libnfs]Unknown
Source package: [libnfs]
Details (1)
- 6.0.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 6.0.2-1.1
  Version impact unknown
  nvd · libnfs · opensuse · tumbleweed

Observed: Oct 23, 2026, 9:46:22 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]