This vulnerability in Oracle Solaris 11.4 kernel allows an attacker with low privileges and logon access to cause a hang or frequent crash, resulting in a complete denial of service (DoS). The vulnerability has a CVSS 3.1 score of 6.5 with vector AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H, indicating local attack vector, low complexity, low privileges required, no user interaction, scope change, no confidentiality or integrity impact, but high availability impact. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). Oracle's April 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability for Oracle Solaris 11.4 in the provided content. Oracle urges customers to apply Critical Patch Updates without delay to mitigate known vulnerabilities.

Successful exploitation allows a low privileged attacker with logon access to cause a hang or repeated crash of Oracle Solaris 11.4, resulting in a complete denial of service. The vulnerability affects system availability but does not impact confidentiality or integrity. The scope change indicates that other products dependent on Oracle Solaris may also be affected indirectly.

Oracle's advisory strongly recommends applying Critical Patch Updates promptly to address vulnerabilities. However, the provided advisory content does not explicitly confirm the availability of a patch or fix for this specific vulnerability in Oracle Solaris 11.4. Therefore, patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpuapr2026.html for current remediation guidance. Customers should remain on actively supported versions and apply Oracle's Critical Patch Updates without delay once available.