What is CVE-2026-79619?

CVE-2026-79619 is a unscored severity Linux kernel vulnerability. CVE-2026-79619 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-79619?

CVE-2026-79619 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-79619?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2026-79619 patch availability.

Is CVE-2026-79619 actively exploited?

CVE-2026-79619 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-79619

On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.

Package Linux Kernel

Published 2026-08-26

Last modified 2026-08-26

Patch available

Awaiting data