Ubuntu OpenZFS Vulnerability Allows Admin Access Bypass

A vulnerability in OpenZFS was discovered, which incorrectly handled authorization checks for certain ioctl operations on Linux. This flaw could allow a local attacker to perform pool-administrative operations or access privileged information, leading to an authorization bypass. The affected systems include Ubuntu 26.04 LTS, 24.04 LTS, and 22.04 LTS. The vulnerability is identified as CVE-2026-8705-1. Users are advised to update their systems to specific package versions to mitigate the risk. After applying the updates, a system reboot is necessary to implement the changes. The issue was reported on August 31, 2026, and is currently not known to be actively exploited in the wild.

Key Points: • OpenZFS vulnerability allows local admin access bypass. • Affected systems include Ubuntu 26.04, 24.04, and 22.04 LTS. • Users must update and reboot their systems to mitigate the risk.