CyberRota Analysis
AI-GeneratedThe vulnerability allows a local user with "receive" delegated ZFS permission to exploit the ZFS_IOC_RECV_NEW ioctl, leading to kernel memory corruption through a crafted receive stream in heal mode. This could potentially result in system instability or unauthorized access to sensitive information. Organizations utilizing ZFS should prioritize addressing this issue to mitigate risks associated with local user exploitation.
Original NVD Description
The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption via ZFS_IOC_RECV_NEW by sending a crafted receive stream in heal mode.
Related CVEs
Other vulnerabilities affecting the same vendor(s)