OpenZFS 2.4.4 Released: Security Hardening, Pool Recovery Tools, and Linux 7.2 Support
OpenZFS 2.4.4 landed on August 21 alongside maintenance releases 2.3.9 and 2.2.11, pulling in 967 commits that tighten security, fix long-standing cache bugs, and add Linux kernel 7.2 support. The release enforces strict caller credential checks across virtual device layers and locks down zone-level isolation, meaning unprivileged containers can no longer bypass capability requirements when touching block devices. Administrators get a new zhack mmp reclaim command to recover pools stranded by Multi-Mirror Protocol failures, while a sweep of PRs finally resolves five years of tangled L2ARC rebuild logic and infinite loop issues. Multi-tenant workflows also benefit from the new send:encrypted delegation permission and cleaner POSIX ACL cache behavior after dataset rollbacks, making this one of the most polished storage updates in the project's history.
OpenZFS 2.4.4 Released: Security Hardening, Pool Recovery Tools, and Linux 7.2 Support
OpenZFS 2.4.4 was released on August 21, introducing significant security enhancements, pool recovery tools, and support for Linux kernel 7.2. The update enforces stricter credential checks for block device access, preventing unprivileged containers from bypassing security requirements, and includes a new command to recover pools affected by Multi-Mirror Protocol failures. Additionally, the release addresses long-standing issues with L2ARC rebuild logic and introduces new permissions for managing encrypted datasets, improving multi-tenant workflows. Overall, these updates make OpenZFS 2.4.4 one of the most comprehensive and polished releases in the project's history, with a focus on security and reliability
