https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:34:42.684657+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-49431 CVE-2026-49431 — Incorrect user validation in ZFS_IOC_SET_PROP ioctl 2026-09-29T13:34:42.686417+00:00

Affected: FreeBSD

The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream.

Any local user can set the internal ZFS metadata flag "$hasrecvd" on datasets via ZFS_IOC_SET_PROP.