VDB
CVE-2026-57918
CVE-2026-57918
PUBLISHED
CVSS 7.1 HIGH
Reported by mitre · Published June 26, 2026
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.
Risk Scores
CVSS 3.1
7.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sahlberg | libnfs | 0 |
| sahlberg | libnfs | 0 |
Timeline
- Jun 26, 2026 CVE Published
- Jun 26, 2026 CVE Updated
- Jun 27, 2026 EPSS Score
- Jun 27, 2026 Coalition ESS Score
- Jun 29, 2026 Security Advisory
- Aug 24, 2026 EPSS Score