85 matches found
USN-8705-2: OpenZFS vulnerability
USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker...
USN-8705-2 zfs-linux vulnerability
USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker...
USN-8705-1: OpenZFS vulnerability
It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authorization bypass...
UBUNTU-CVE-2026-79619
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
EUVD-2026-66419
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619 OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619 OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
CVE-2026-79619
CVE-2026-79619 affects OpenZFS on Linux, where several ioctl authorization checks incorrectly treat a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege. This allows an unprivileged local user to perform root-requiring operations such as pool c...
CVE-2026-79619 OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
PT-2026-82094
Name of the Vulnerable Software and Affected Versions OpenZFS affected versions not specified Description On Linux, several ioctl authorization checks incorrectly treat capabilities held within a user-created, unprivileged namespace as equivalent to actual host privileges. This allows an...
CVE-2026-79619: Incorrect Authorization
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...
Linux Distros Unpatched Vulnerability : CVE-2026-79619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host...
Debian dsa-6462 : libnvpair3linux - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6462 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6462-1 [email protected] https://www.debian.org/security/ Aron X...
OpenZFS Linux Authorization Bypass / Memory Corruption
OpenZFS on Linux contains multiple authorization and parser flaws that can allow low-privileged container users to access host-pool operations, corrupt cross-tenant storage, trigger kernel memory corruption and denial of service, and, under demonstrated research conditions, escalate to a host uid...
The vulnerability of the ZFS_IOC_RECV_NEW handler of the OpenZFS component in FreeBSD’s operating systems allows a attacker to corrupt memory.
The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...
The vulnerability of the ZFS_IOC_SET_PROP handler of the OpenZFS component in FreeBSD allows a attacker to compromise the integrity of the protected information.
The vulnerability of the ZFSIOCSETPROP handler in the OpenZFS component of FreeBSD operating systems is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the zfs_ioc_userspace_many() function in the OpenZFS component of FreeBSD-based operating systems allows a attacker to increase their privileges.
The vulnerability of the zfsiocuserspacemany function in the OpenZFS component of FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...