Integer Underflow in libnfs Affects NFS Connections

CVE-2026-57918

What is CVE-2026-57918?

The libnfs library, utilized for network file system (NFS) connections, is susceptible to an integer underflow issue in its READ_IOVEC function. This vulnerability occurs when connecting to a specially crafted NFS server, leading to potential disruptions or unauthorized actions. The flaw arises as the expected Protocol Data Unit (PDU) size surpasses the absolute PDU size derived from the xid/record-marker, which may compromise the stability and security of NFS communications.

References