o
openzfs
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 21, 2019 to present
19
Total CVEs
4
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
46/100
medium
🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
0High
4Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. OpenZFS OpenZFS18
2. OpenZFS ZFS3
3. ubuntu/zfs-linux3
4. OpenZFS OpenZFS on Linux (spl.ko and zfs.ko)1
5. debian/zfs-linux1
Recent Vulnerabilities
See more →CVE-2026-49431
unknown
Incorrect user validation in ZFS_IOC_SET_PROP ioctl
Aug 19, 2026🔧 No Patch
CVE-2026-49430
unknown
Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
Aug 19, 2026🔧 No Patch
CVE-2026-49429
unknown
Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
Aug 19, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/508
unknown
Fwd: OpenZFS Linux open zpool manipulation and escapes via unprivileged userns
Aug 16, 2026🔧 No Patch
EOL-openzfs-2.4
unknown
Dec 18, 2025
EOL-openzfs-2.3
unknown
Oct 17, 2024
https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/
unknown
Two new versions of OpenZFS fix long-hidden corruption bug
Dec 4, 2023🔧 No Patch
CVE-2023-49298
CVSS 7.5high
Nov 24, 2023
EOL-openzfs-2.2
unknown
Jul 27, 2023
latest-version-openzfs-2.2
unknown
Jul 27, 2023
Monitor openzfs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.