Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
OpenZFS CVE-2026-79619 - OpenZFS Incorrect Authorization et al Allows unprivileged ZFS pool operations and read/write among other things. https://seclists.org/fulldisclosure/2026/Aug/40
Post summary
The post announces CVE-2026-79619 in OpenZFS, detailing an incorrect authorization vulnerability that permits unprivileged pool operations and read/write access, with a link to the full disclosure mailing list entry.
This article does a reasonable job at explaining it, but I recommend passing your own agents over the findings. AMA - I'm happy to answer questions about the discovery process, reporting, etc. https://proxmoxpulse.com/articles/openzfs-cve-2026-79619-proxmox-dev-zfs/
Post summary
The post shares a link to an article about a CVE and invites questions about the discovery and reporting process, but it does not itself provide strong indicators such as PoC, exploit code, active exploitation, patching, or detailed vulnerability specifics.
🚨*CVE* CVE-2026-79619 On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege,… https://www.cve.org/CVERecord?id=CVE-2026-79619 ----- Traducción: CVE-2026-79619 En … https://infoflow.cloud`
Post summary
The tweet announces a new CVE (CVE‑2026‑79619) describing a privilege escalation flaw in OpenZFS on Linux, without providing any PoC, exploit, or mitigation details.
CVE-2026-79619 On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege,… https://www.cve.org/CVERecord?id=CVE-2026-79619
Post summary
The post references CVE-2026-79619, explaining a privilege escalation issue in OpenZFS ioctl authorization, but provides no PoC, exploit, or patch details.