unstable: fail (log)
The tests ran in 0:22:47
Last run: 2026-11-10T20:11:38.000Z
Previous status: unknown
testing: pass (log)
The tests ran in 0:59:28
Last run: 2026-11-08T00:09:16.000Z
Previous status: unknown
stable: pass (log)
The tests ran in 0:52:49
Last run: 2026-09-12T12:41:59.000Z
Previous status: unknown
Marked for autoremoval on 09 December: #1151447high
Version 2.4.4-1 of zfs-linux is marked for autoremoval from testing on Wed 09 Dec 2026. It is affected by #1151447. The removal of zfs-linux will also cause the removal of (transitive) reverse dependencies: sanoid, simplesnap, zfs-auto-snapshot, zfsnap, zsnapd. You should try to prevent the removal by fixing these RC bugs.
CVE-2026-79619:
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
CVE-2026-79619:
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
1 bug with a patch to review in the bug tracker
normal
Among the 16 debian patches
available in version 2.4.4-1 of the package,
we noticed the following issues:
4 patches
where the metadata indicates that the patch has not yet been forwarded
upstream. You should either forward the patch upstream or update the
metadata to document its real status.
testing migrations
This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/z/zfs-linux.png){kind=link}