CVE-2026-49430

Name of the Vulnerable Software and Affected Versions OpenZFS (affected versions not specified)

Description An integer overflow exists in the ZFS IOC RECV NEW ioctl within the heal receive path. The issue occurs when a 64-bit payload size is truncated to a 32-bit integer during allocation, while the original 64-bit size is subsequently used as the length for a byteswap operation. A local user possessing the "receive" delegated ZFS permission can trigger kernel memory corruption by sending a crafted receive stream in heal mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.