CVE-2026-89098
Received Received - Intake

fsidd Daemon Assertion Failure Leads to DoS in nfs-utils

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: redhat-SADP

Description
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-89098
EUVD
EUVD-2026-103016

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Red Hat Red Hat Enterprise Linux 10 *
Red Hat Red Hat Enterprise Linux 7 *
Red Hat Red Hat Enterprise Linux 8 *
Red Hat Red Hat Enterprise Linux 9 *
Red Hat Red Hat OpenShift Container Platform 4 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in nfs-utils where the fsidd daemon crashes due to improper handling of input over its local domain socket. A local attacker can send a malformed request without required arguments to trigger an assertion failure, causing a Denial of Service (DoS) for filesystem identifier lookup services until the daemon is manually restarted.

Detection Guidance

Detecting this vulnerability requires checking for crashes or abnormal behavior in the fsidd daemon. Monitor system logs for assertion failures or crashes related to fsidd. Check if the daemon is running with: systemctl status fsidd. Look for malformed requests in logs under /var/log/messages or journalctl -u fsidd.

Impact Analysis

If you use systems running affected versions of nfs-utils, this flaw could allow a local attacker to crash the fsidd daemon, disrupting NFS filesystem identifier services. This may lead to temporary loss of access to network filesystems until the service is restarted.

Mitigation Strategies

Immediately restart the fsidd daemon if it crashes. Apply patches or updates from your vendor if available. Restrict local access to the fsidd socket to prevent exploitation. Monitor for further crashes or unusual activity in the daemon.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-89098. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart