CVE-2026-49431
2026-08-19
05h15 +00:00
05h15 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Incorrect user validation in ZFS_IOC_SET_PROP ioctl
The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on datasets via ZFS_IOC_SET_PROP.CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Incorrect Authorization The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. |
