2 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
illumos disclosed CVE-2026-102916, a bhyve REP-prefix emulation bug that mishandles CPU flags.
illumos security reported CVE-2026-102916, internal bug 18491, in the bhyve virtual machine monitor. REP-prefix instruction emulation mishandles CPU flags. Emily Albini of Oxide Computer discovered the flaw, and iximeow of Oxide Computer fixed it. The notice does not describe exploitation in the wild.
illumos reported door-server CVEs causing denial of service and missing authorization in nscd and ipmgmtd.
Dan McDonald reported illumos CVEs for denial of service and missing authorization in door server processes, spanning CVE-2026-104112 through CVE-2026-104117. CVE-2026-104112 (bug 18494) is unbounded file-descriptor allocation in nscd. CVE-2026-104113 is an ipmgmtd double-free of caller credentials on authorization failure, limited to OmniOS and SmartOS rather than general illumos. No active exploitation is stated.