USN-8705-2

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8705-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8705-2.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8705-2
Upstream
Related
Published
2026-08-31T21:36:58Z
Modified
2026-09-01T09:56:15.947671794Z
Summary
zfs-linux vulnerability
Details

USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authorization bypass.

References

Affected packages

Ubuntu:Pro:18.04:LTS / zfs-linux

Package

Name
zfs-linux
Purl
pkg:deb/ubuntu/zfs-linux?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.5-1ubuntu16.12+esm1

Affected versions

0.*
0.6.5.11-1ubuntu3
0.6.5.11-1ubuntu4
0.6.5.11-1ubuntu5
0.6.5.11-1ubuntu6
0.7.5-1ubuntu2
0.7.5-1ubuntu3
0.7.5-1ubuntu4
0.7.5-1ubuntu5
0.7.5-1ubuntu6
0.7.5-1ubuntu7
0.7.5-1ubuntu8
0.7.5-1ubuntu9
0.7.5-1ubuntu10
0.7.5-1ubuntu11
0.7.5-1ubuntu12
0.7.5-1ubuntu13
0.7.5-1ubuntu14
0.7.5-1ubuntu15
0.7.5-1ubuntu16
0.7.5-1ubuntu16.2
0.7.5-1ubuntu16.3
0.7.5-1ubuntu16.4
0.7.5-1ubuntu16.6
0.7.5-1ubuntu16.7
0.7.5-1ubuntu16.8
0.7.5-1ubuntu16.9
0.7.5-1ubuntu16.10
0.7.5-1ubuntu16.11
0.7.5-1ubuntu16.12

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libnvpair1linux",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "libuutil1linux",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "libzfs2linux",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "libzpool2linux",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfs-dkms",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfs-dracut",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfs-initramfs",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfs-test",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfs-zed",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        },
        {
            "binary_name": "zfsutils-linux",
            "binary_version": "0.7.5-1ubuntu16.12+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8705-2.json"
cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-79619",
            "severity": [
                {
                    "type": "CVSS_V4",
                    "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "type": "Ubuntu",
                    "score": "high"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:Pro:18.04:LTS"
}

Ubuntu:Pro:20.04:LTS / zfs-linux

Package

Name
zfs-linux
Purl
pkg:deb/ubuntu/zfs-linux?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.3-1ubuntu12.18+esm1

Affected versions

0.*
0.8.1-1ubuntu14
0.8.1-1ubuntu15
0.8.1-1ubuntu16
0.8.1-1ubuntu17
0.8.2-3ubuntu1
0.8.2-3ubuntu2
0.8.2-3ubuntu3
0.8.2-3ubuntu4
0.8.2-3ubuntu5
0.8.3-1ubuntu2
0.8.3-1ubuntu3
0.8.3-1ubuntu4
0.8.3-1ubuntu5
0.8.3-1ubuntu6
0.8.3-1ubuntu7
0.8.3-1ubuntu8
0.8.3-1ubuntu9
0.8.3-1ubuntu10
0.8.3-1ubuntu11
0.8.3-1ubuntu12
0.8.3-1ubuntu12.1
0.8.3-1ubuntu12.2
0.8.3-1ubuntu12.3
0.8.3-1ubuntu12.4
0.8.3-1ubuntu12.5
0.8.3-1ubuntu12.6
0.8.3-1ubuntu12.7
0.8.3-1ubuntu12.8
0.8.3-1ubuntu12.9
0.8.3-1ubuntu12.10
0.8.3-1ubuntu12.11
0.8.3-1ubuntu12.12
0.8.3-1ubuntu12.13
0.8.3-1ubuntu12.14
0.8.3-1ubuntu12.15
0.8.3-1ubuntu12.16
0.8.3-1ubuntu12.17
0.8.3-1ubuntu12.18

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libnvpair1linux",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "libuutil1linux",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "libzfs2linux",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "libzpool2linux",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "python3-pyzfs",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "spl",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "spl-dkms",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfs-dkms",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfs-dracut",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfs-initramfs",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfs-test",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfs-zed",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        },
        {
            "binary_name": "zfsutils-linux",
            "binary_version": "0.8.3-1ubuntu12.18+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8705-2.json"
cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-79619",
            "severity": [
                {
                    "type": "CVSS_V4",
                    "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "type": "Ubuntu",
                    "score": "high"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:Pro:20.04:LTS"
}