CVE-2021-43395

PoC ×2—

CVSS 3.1

5.5 medium

EPSS

<1%p24

Published

Dec 26, 2022 (Dec 26, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.

Vendors: illumos omniosce openindiana joyent oracle
Products: illumos, omnios, openindiana, smartos, solaris
Weakness: CWE-667
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.