This vulnerability affects Oracle Solaris 11.4 and involves the Filesystems component. An attacker with low privileges and logon access to the system can exploit this flaw to cause the operating system to hang or crash repeatedly, leading to a complete denial of service. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms that the attack requires local access with low privileges, has low attack complexity, no user interaction, and impacts availability only. There is no evidence of confidentiality or integrity compromise. The vulnerability is classified under CWE-400, which relates to uncontrolled resource consumption leading to DoS conditions. The Oracle Critical Patch Update advisory from July 2026 references this vulnerability but does not explicitly confirm patch availability or remediation details for Oracle Solaris 11.4 at this time.

Successful exploitation results in unauthorized ability to cause a hang or frequent crashes of Oracle Solaris 11.4, leading to a complete denial of service. There is no impact on confidentiality or integrity. The attack requires local access with low privileges and does not require user interaction.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available. Until a patch is confirmed, restrict local access to trusted users only to reduce risk.