sec.01 // approach
Immune by architecture.
Bulkhead ZFS-Live uses SMAPIv3. The vulnerable XAPI code paths identified in our audit do not exist in the driver. Not mitigated — structurally absent.
sec.02 // research
The numbers.
89
Published XAPI findings
79
Confirmed exploitable
5
Patched (VATES-SA-2026-011)
84
Unpatched findings
Published at cna.moksha.dk.
sec.03 // storage
Bulkhead Storage.
Built from scratch on SMAPIv3. Native datapath and volume plugin architecture with no inherited code.
- SMAPIv3 datapath and volume plugin
- Raw ZFS zvols — native snapshots, compression, replication
- Single-layer architecture — one stack, no abstraction overhead
- Native iSCSI, NFS and SMB drivers coming soon