Log in Start free

Vulnerability · Published Aug 26, 2026 · Assigned by canonical

CVE-2026-79619OpenZFS: user-namespace capability check allows unprivileged local authorization bypass

High 7.3

In plain English

A high-severity incorrect authorization in OpenZFS from OpenZFS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)7.3High
Exploit odds (30 days)0.2%top 90.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12zfs-linuxno fix listedDEBIAN-CVE-2026-79619
Debian:13zfs-linux2.3.9-0+deb13u1DEBIAN-CVE-2026-79619
Debian:14zfs-linux2.4.4-1DEBIAN-CVE-2026-79619
Ubuntu:22.04:LTSzfs-linux2.1.5-1ubuntu6~22.04.7UBUNTU-CVE-2026-79619
Ubuntu:22.04:LTSzfs-linux2.1.5-1ubuntu6~22.04.7USN-8705-1
Ubuntu:24.04:LTSzfs-linux2.2.2-0ubuntu9.5USN-8705-1
Ubuntu:24.04:LTSzfs-linux2.2.2-0ubuntu9.5UBUNTU-CVE-2026-79619
Ubuntu:26.04:LTSzfs-linux2.4.1-1ubuntu5.1USN-8705-1
Ubuntu:26.04:LTSzfs-linux2.4.1-1ubuntu5.1UBUNTU-CVE-2026-79619

Affected products (as reported)

VendorProductVersions
OpenZFS OpenZFS 0.7.0 – before 2.2.112.3.0 – before 2.3.92.4.0 – before 2.4.4

Weakness: CWE-863 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References