CVE-2026-49431

Name of the Vulnerable Software and Affected Versions OpenZFS (affected versions not specified)

Description An access control flaw exists in the ZFS IOC SET PROP ioctl handler, used by zfs-set(8). This issue allows an unprivileged local user to incorrectly set metadata on a dataset, specifically the internal ZFS metadata flag $hasrecvd, which indicates that the dataset received properties from a zfs-recv(8) stream. This could potentially impact the integrity of the protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.