CVE-2026-49431

The ZFS_IOC_SET_PROP ioctl in FreeBSD's OpenZFS component incorrectly validated the calling user, allowing any local user to set the internal "$hasrecvd" metadata flag on datasets, falsely indicating they received properties from a zfs-recv(8) stream. The BDU assessment classifies this as an acce...