CVE-2026-57918 Integer overflow in libnfs
A crafted NFS server can trigger an integer underflow in libnfs, potentially causing a denial of service during socket communication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-57918?
CVE-2026-57918 is a high-severity vulnerability in sahlberg libnfs, published on 26 Jun 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.
Weakness: CWE-191
Which versions are affected by CVE-2026-57918?
How do I fix CVE-2026-57918?
Apply the vendor's patch.
Is CVE-2026-57918 being exploited?
There is no known exploitation of CVE-2026-57918 in the wild and no public exploit code.
Sources
Also known as GHSA-27p2-fpv6-cj8c, MGASA-2026-0438.