---
id: "CVE-2026-91324"
kind: "vulnerability"
aliases: ["CVE-2026-91324"]
title: "Oracle Solaris 11.4 Libraries flaw lets local users crash the system"
severity: "medium"
cvss: 4.7
epss: 0.00118
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "on-prem", "oracle-solaris", "shared-hosts", "solaris"]
not_affected_if: ["no-local-logins", "non-solaris"]
published_at: "2026-10-20T22:20:34+00:00"
first_seen_at: "2026-10-23T21:57:26+00:00"
updated_at: "2026-10-25T12:38:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91324", "first_seen_at": "2026-10-23T21:57:26+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-91324", "first_seen_at": "2026-10-25T12:38:52+00:00"}]
---

# Oracle Solaris 11.4 Libraries flaw lets local users crash the system

A flaw in the Libraries component of Oracle Solaris 11.4 can be triggered by a local logged-in user, causing a hang or repeatable crash of the operating system. The attack is hard to execute and needs a person other than the attacker to take an action.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `uname -v` on the Solaris host and compare against Oracle's July 2026 or later patch set for Solaris 11.4 (unknown exact patch ID from the sources)
- Run `pkg info entire` to see the installed Solaris 11.4 package version

## Fix

- Apply the latest Oracle Solaris 11.4 SRU (support repository update) that includes the Oracle Critical Patch Update fix for CVE-2026-91324 (exact SRU number unknown)
- Run `pkg update` and reboot into the new boot environment

## Timeline

- 2026-10-23T21:57:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91324
- 2026-10-25T12:38:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-91324

## From the sources

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).   The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_