Skip to content
OpenAdvisories
High USN-8705-1 1 CVE

zfs-linux vulnerability

Published Aug 31, 2026 · Updated Aug 31, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenZFS incorrectly handled authorization checks for
certain ioctl operations on Linux. A local attacker could possibly use this
issue to perform pool-administrative operations or access privileged
information, resulting in an authorization bypass.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS zfs-linux 2.1.5-1ubuntu6~22.04.7
Ubuntu · 24.04 LTS 24.04:LTS zfs-linux 2.2.2-0ubuntu9.5
Ubuntu · 26.04 LTS 26.04:LTS zfs-linux 2.4.1-1ubuntu5.1

Vulnerabilities 1

  • High 7.3
    CVE-2026-79619

    OpenZFS: user-namespace capability check allows unprivileged local authorization bypass

    On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected…

    OpenZFS OpenZFS zfs-linux zfs-linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-79619