CyberRota Analysis
AI-GeneratedThe vulnerability allows any local user to manipulate ZFS dataset metadata by setting the internal flag "$hasrecvd" through the ZFS_IOC_SET_PROP ioctl, without proper privilege validation. This could lead to unauthorized access or modification of dataset properties, potentially impacting data integrity and security. Organizations using ZFS should prioritize addressing this issue to prevent exploitation by unprivileged users.
Original NVD Description
The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv(8) stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on datasets via ZFS_IOC_SET_PROP.
Related CVEs
Other vulnerabilities affecting the same vendor(s)