OpenZFS on Linux full-disclosed for zpool and userns escapes
Researcher Erica Windisch publicized flaws she says let unprivileged users manipulate pools and break out of user namespaces, after notifying CERT.
Security researcher Erica Windisch has full-disclosed a set of vulnerabilities in OpenZFS on Linux that she says allow unprivileged manipulation of zpools and escapes via unprivileged user namespaces.
OpenZFS ships as out-of-tree kernel modules on Linux, separate from the mainline kernel. Windisch reported the issues after validating them in disposable guests and in appliance-style setups used with stacks such as Proxmox VE, TrueNAS SCALE, and Unraid. She notified CERT on 12 August 2026 and chose public disclosure a few days later, saying she wanted to reduce the risk that only attackers would hold working knowledge of the bugs while defenders waited.
She said she hoped upstream patches and remediation guidance would appear soon. The disclosure does not yet include coordinated fixed releases from the OpenZFS project in the material posted to oss-security.
Operators who expose OpenZFS to untrusted local users or to workloads inside user namespaces should treat pool administration boundaries and namespace isolation as potentially weaker than assumed until patches and clear mitigation guidance land.