CVE-2026-79619

Description

On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.

Why is this CVE high priority?

See ubuntu cvss score

Learn more about Ubuntu priority

• How can I get the fixes?
• What do statuses mean?

Get expanded security coverage with Ubuntu Pro

Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.

Severity score breakdown

CVSS version: CVSS v4.0

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-8705-1
• OpenZFS vulnerability
• 31 August 2026
• USN-8705-2
• OpenZFS vulnerability
• 31 August 2026

Other references

• https://www.cve.org/CVERecord?id=CVE-2026-79619
• https://github.com/advisories/GHSA-mhf5-q8gw-qg9v
• https://www.openwall.com/lists/oss-security/2026/08/16/5
• https://github.com/openzfs/zfs/pull/18959