https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:55:06 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-11477 bdu:2026-11477 https://vulnerability.circl.lu/vuln/bdu:2026-11477 https://vulnerability.circl.lu/vuln/fkie_cve-2026-49431 <p>The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream.</p> <p>Any local user can set the internal ZFS metadata flag &#34;$hasrecvd&#34; on datasets via ZFS_IOC_SET_PROP.</p> <p>The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream.</p> <p>Any local user can set the internal ZFS metadata flag &#34;$hasrecvd&#34; on datasets via ZFS_IOC_SET_PROP.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-49431 https://vulnerability.circl.lu/vuln/ghsa-hrxx-hfqm-f933 <p>The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream.</p> <p>Any local user can set the internal ZFS metadata flag &#34;$hasrecvd&#34; on datasets via ZFS_IOC_SET_PROP.</p> <p>The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream.</p> <p>Any local user can set the internal ZFS metadata flag &#34;$hasrecvd&#34; on datasets via ZFS_IOC_SET_PROP.</p> https://vulnerability.circl.lu/vuln/ghsa-hrxx-hfqm-f933