CVE-2025-12801 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-12801 Interim 1 1 2026-03-05T01:25:41Z current 2026-03-05T01:25:41Z 2026-03-05T01:25:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-12801 A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 openSUSE Leap 15.6 libnfsidmap1 nfs-client nfs-doc nfs-kernel-server nfs-utils nfsidmap-devel nfs-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nfs-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nfs-utils as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nfs-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nfs-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nfs-utils as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS nfs-client as a component of SUSE Linux Enterprise Micro 5.2 nfs-kernel-server as a component of SUSE Linux Enterprise Micro 5.2 nfs-utils as a component of SUSE Linux Enterprise Micro 5.2 nfs-client as a component of SUSE Linux Enterprise Micro 5.3 nfs-kernel-server as a component of SUSE Linux Enterprise Micro 5.3 nfs-utils as a component of SUSE Linux Enterprise Micro 5.3 nfs-client as a component of SUSE Linux Enterprise Micro 5.4 nfs-kernel-server as a component of SUSE Linux Enterprise Micro 5.4 nfs-utils as a component of SUSE Linux Enterprise Micro 5.4 nfs-client as a component of SUSE Linux Enterprise Micro 5.5 nfs-kernel-server as a component of SUSE Linux Enterprise Micro 5.5 nfs-utils as a component of SUSE Linux Enterprise Micro 5.5 libnfsidmap1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfs-client as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfs-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfs-kernel-server as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfsidmap-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfs-utils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 nfs-client as a component of SUSE Linux Enterprise Server 12 SP2-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 12 SP2-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS nfs-client as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nfs-client as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 12 SP5-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security nfs-client as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nfs-client as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nfs-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nfs-client as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nfs-client as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP5-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libnfsidmap1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nfs-client as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nfs-doc as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nfs-kernel-server as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nfsidmap-devel as a component of SUSE Linux Enterprise Server 15 SP6-LTSS nfs-utils as a component of SUSE Linux Enterprise Server 15 SP6-LTSS libnfsidmap1 as a component of SUSE Linux Enterprise Server 16.0 nfs-client as a component of SUSE Linux Enterprise Server 16.0 nfs-kernel-server as a component of SUSE Linux Enterprise Server 16.0 nfsidmap-devel as a component of SUSE Linux Enterprise Server 16.0 nfs-utils as a component of SUSE Linux Enterprise Server 16.0 nfs-utils as a component of SUSE Linux Enterprise Server Teradata 12 SP3 nfs-utils as a component of SUSE Linux Enterprise Server Teradata 15 SP4 nfs-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nfs-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nfs-kernel-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nfs-utils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nfs-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nfs-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nfs-kernel-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 nfs-utils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libnfsidmap1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nfs-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nfs-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nfs-kernel-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nfsidmap-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 nfs-utils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 libnfsidmap1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nfs-client as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nfs-kernel-server as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nfsidmap-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 nfs-utils as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libnfsidmap1 as a component of SUSE Linux Micro 6.0 nfs-client as a component of SUSE Linux Micro 6.0 nfs-kernel-server as a component of SUSE Linux Micro 6.0 nfs-utils as a component of SUSE Linux Micro 6.0 libnfsidmap1 as a component of SUSE Linux Micro 6.1 nfs-client as a component of SUSE Linux Micro 6.1 nfs-kernel-server as a component of SUSE Linux Micro 6.1 nfs-utils as a component of SUSE Linux Micro 6.1 libnfsidmap1 as a component of openSUSE Leap 15.6 nfs-client as a component of openSUSE Leap 15.6 nfs-doc as a component of openSUSE Leap 15.6 nfs-kernel-server as a component of openSUSE Leap 15.6 nfsidmap-devel as a component of openSUSE Leap 15.6 nfs-utils as a component of openSUSE Leap 15.6 A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client. CVE-2025-12801 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N