Suricata: unbounded NFS parser state lets crafted traffic exhaust sensor memory

Impact

NFS parser state structures are insufficiently bounded, so crafted NFS traffic makes the Suricata process consume memory until it is killed or the host starves. Where Suricata is the IDS watching the storage and management networks of a GPU fleet - and NFS is exactly what those networks carry for datasets and home directories - losing the sensor means losing visibility during the same traffic that triggered it. If the sensor is inline as an IPS, the failure is a traffic outage rather than just a blind spot. No confidentiality or integrity impact; this is availability only.

Who can reach it

Anyone who can get NFS traffic onto a segment Suricata inspects. No authentication to Suricata is involved - the sensor is a passive or inline observer of the wire.

What to do

Upgrade to Suricata 7.0.16 or 8.0.5 and restart the sensor; on an inline deployment plan for the brief gap or fail-open window that restart implies. Documented workaround if you cannot upgrade immediately: disable NFS application-layer parsing in suricata.yaml when you do not need it, which also requires a restart.

References

Related entries

• Airflow FTP provider: FTPS data channel sent in cleartext because PROT P was never issuedCVE-2026-49486 · Apache Airflow FTP provider (FTPSHook data channel)High
• Sigstore Timestamp Authority: unauthenticated requests mint unbounded Prometheus series until memory is exhaustedCVE-2026-49835 · Sigstore Timestamp Authority (wrapMetrics Prometheus label cardinality)High
• rclone (local backend, --links): When rclone copies from an untrusted remote with --links, it recreates symlinksCVE-2026-54572 · rclone (local backend, --links)High
• Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions memberCVE-2026-57281 · Jenkins Script Security Plugin (Groovy sandbox, AST transformation annotations)High
• NVIDIA AIStore: Promote API reads any file reachable by the target processCVE-2026-65161 · NVIDIA AIStore (Promote API, absolute source path)High
• Airflow Backfill API: any Dag editor can read and cancel backfills belonging to other DagsCVE-2026-68968 · Apache Airflow Backfill API (authorization dependency id parsing)High