o
openzfs
Security Risk Profile
53
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 21, 2019 to present
21
Total CVEs
7
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
53/100
medium
🆕 1Fresh (<7d)📈 6 in Last 30 Days
Severity Distribution
Critical
0High
7Medium
0Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. FreeBSD FreeBSD114
2. OpenZFS OpenZFS20
3. OpenZFS ZFS3
4. ubuntu/zfs-linux3
5. debian/zfs-linux2
Recent Vulnerabilities
See more →CVE-2026-79619
CVSS 7.3high
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
Aug 26, 2026
CVE-2026-49431
CVSS 3.3low
Incorrect user validation in ZFS_IOC_SET_PROP ioctl
Aug 19, 2026🔧 No Patch
CVE-2026-49430
CVSS 7.8high
Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
Aug 19, 2026🔧 No Patch
CVE-2026-49429
CVSS 7.8high
Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
Aug 19, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/508
unknown
Fwd: OpenZFS Linux open zpool manipulation and escapes via unprivileged userns
Aug 16, 2026🔧 No Patch
EOL-openzfs-2.4
unknown
Dec 18, 2025
EOL-openzfs-2.3
unknown
Oct 17, 2024
https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/
unknown
Two new versions of OpenZFS fix long-hidden corruption bug
Dec 4, 2023🔧 No Patch
CVE-2023-49298
CVSS 7.5high
Nov 24, 2023
EOL-openzfs-2.2
unknown
Jul 27, 2023
Monitor openzfs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.