Ubuntu 26.04 LIBNFS High NFS Service Disruption USN-8464-1

ubuntu

June 23, 2026

LIBNFS could be made to crash or run programs if it connected to a specially crafted NFS server.

Summary

LIBNFS could be made to crash or run programs if it connected to a

specially crafted NFS server.

Software Description:

- libnfs: NFS client library

Details:

It was discovered that LIBNFS incorrectly handled certain string sizes when

connecting to an NFS server. An attacker could use this issue to cause

LIBNFS to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service critical Ubuntu NFS libnfs

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libnfs-utils                    5.0.2-1ubuntu1.1
  libnfs14                        5.0.2-1ubuntu1.1

Ubuntu 25.10
  libnfs-utils                    5.0.2-1ubuntu0.25.10.1
  libnfs14                        5.0.2-1ubuntu0.25.10.1

Ubuntu 24.04 LTS
  libnfs-utils                    5.0.2-1ubuntu0.24.04.1
  libnfs14                        5.0.2-1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libnfs-utils                    4.0.0-1ubuntu0.1
  libnfs13                        4.0.0-1ubuntu0.1

In general, a standard system update will make all the necessary changes.