CVE-2026-49429

A kernel heap overflow exists in the OpenZFS component of FreeBSD operating systems. The vulnerability is triggered via the ZFS_IOC_USERSPACE_MANY ioctl (used by zfs-userspace(8)), where a 64-bit output buffer size is truncated to a 32-bit integer for kernel allocation, but the original 64-bit si...

FreeBSD-SA-26:40.zfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:40.zfs Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenZFS Category: contrib Module: openzfs Announced: 2026-06-30 Credits:...

PT-2026-55923

Name of the Vulnerable Software and Affected Versions OpenZFS affected versions not specified Description A kernel heap overflow exists in the zfs ioc userspace many function within the ZFS IOC USERSPACE MANY ioctl used by zfs-userspace8. The issue occurs because a 64-bit output buffer size is...