Vulnerability intelligence

CVE-2026-49430

The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.

CVSS Score

—

Unrated

EPSS — Exploit Probability

0.2%

Riskier than 10% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

NVD entry

1 article across 1 outlet · first covered Jul 6, 2026 · latest Jul 6, 2026

Coverage timeline

FreeBSD Security Advisories Detail Critical Vulnerabilities
securityonline.info · Jul 6, 2026