Vendor
OpenZFS
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.3
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected…