This vulnerability in Oracle Solaris 11.4 kernel permits a low privileged attacker who can log on to the system to cause a complete denial of service by hanging or repeatedly crashing the operating system. The vulnerability impacts availability only, with no confidentiality or integrity loss. The attack scope includes Oracle Solaris and potentially other products. The CVSS vector indicates local attack vector, low complexity, low privileges required, no user interaction, and scope change. Oracle's April 2026 Critical Patch Update advisory references this vulnerability among many others but does not explicitly state patch availability or remediation details for this specific issue.

Successful exploitation results in unauthorized denial of service by causing the Oracle Solaris system to hang or crash repeatedly. There is no impact on confidentiality or integrity. The vulnerability affects availability and may impact additional Oracle products due to scope change. No known exploits in the wild have been reported.

Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory. Customers are strongly advised to apply the April 2026 Critical Patch Update promptly to address this and other vulnerabilities. Patch status for this specific vulnerability is not explicitly confirmed in the advisory; therefore, customers should monitor Oracle's security alerts and apply updates as they become available. No vendor advisory states that no action is required or that the issue is already mitigated.