Illumos Illumos-Gate
9 CVEs affecting Illumos Illumos-Gate. Latest disclosed: 2026-10-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-31284 | High | 7.8 | 2023-05-04 | illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net. |
CVE-2026-104117 | | 2026-10-09 | A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration… | |
CVE-2026-104116 | | 2026-10-09 | A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to dete… | |
CVE-2026-104115 | | 2026-10-09 | A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nf… | |
CVE-2026-104114 | | 2026-10-09 | A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-ine… | |
CVE-2026-104112 | | 2026-10-09 | A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, sw… | |
CVE-2026-102916 | | 2026-10-09 | A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that a… | |
CVE-2026-15449 | | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctl… | |
CVE-2026-15422 | | 2026-07-16 | The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since… |