https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:37:51.487184+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-49429 CVE-2026-49429 — Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl 2026-09-29T03:37:51.489898+00:00

Affected: FreeBSD

The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records.

A local user with the "userused" delegated ZFS permission can trigger a kernel heap overflow via the ZFS_IOC_USERSPACE_MANY ioctl, potentially escalating privileges.