CVE-2026-49431 — Incorrect user validation in ZFS_IOC_SET_PROP ioctl

CVE-2026-49431

Incorrect user validation in ZFS_IOC_SET_PROP ioctl PUBLISHED

Description (CNA)

The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on datasets via ZFS_IOC_SET_PROP.

Affected (CNA)

Vendor / product	Versions
FreeBSD / FreeBSD	affected 15.1-RELEASE before p1; affected 15.0-RELEASE before p11; affected 14.4-RELEASE before p7; affected 14.3-RELEASE before p16

CWE

CWE-863

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:40.zfs.asc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.