Skip to content
OpenAdvisories
High USN-8705-2 1 CVE

zfs-linux vulnerability

Published Aug 31, 2026 · Updated Sep 1, 2026

Ecosystem: Ubuntu

Summary

USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the
corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that OpenZFS incorrectly handled authorization checks for
certain ioctl operations on Linux. A local attacker could possibly use this
issue to perform pool-administrative operations or access privileged
information, resulting in an authorization bypass.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS zfs-linux 0.7.5-1ubuntu16.12+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS zfs-linux 0.8.3-1ubuntu12.18+esm1

Vulnerabilities 1

  • High 7.3
    CVE-2026-79619

    OpenZFS: user-namespace capability check allows unprivileged local authorization bypass

    On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected…

    OpenZFS OpenZFS zfs-linux zfs-linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-79619