OpenZFS Authorization Bypass Allows Unprivileged User Actions

CVE-2026-79619

What is CVE-2026-79619?

A vulnerability in OpenZFS on Linux allows unprivileged users to exploit several ioctl authorization checks. These checks mistakenly interpret capabilities within user-created, unprivileged namespaces as equivalent to actual host privileges. Exploiting this flaw enables a local user to perform critical operations such as creating, importing, or destroying pools, accessing the pool event log, and executing fault injections without needing regular root access. Only minimal permissions to access /dev/zfs are required, alongside the ability to create unprivileged user namespaces, which opens the door for potential security breaches.

References