CVE-2026-89096

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-772

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-17: 110-17
Full discourse1 post
  • VulDB 🛡@vuldb

    ⚠️ A severe vulnerability was disclosed for Red Hat Enterprise Linux and OpenShift Container Platform (CVE-2026-89096) vuldb.​com/vuln/421533 https://t.co/mW0foGJpP7

    00000101
    2.3K followersView on X

Explore more