The flaw resides in the Filesystems component of Oracle Solaris 11.4. With local access and low privileges, an attacker can trigger a hang or crash that repeatedly restarts the operating system, exhausting availability. No confidentiality or integrity breach is reported. The CVSS vector indicates local attacker with low privileges and no user interface is required, meaning the flaw can be exploited by users who have a normal login to the system. The vulnerability is classified as an availability disruption rather than a compromise of data.

This vulnerability affects Oracle Solaris version 11.4 only, as specified by the vendor and the CPE string. No other versions or distributions are listed in the advisories. Systems running Oracle Solaris 11.4 that have local logon access may be vulnerable.

The CVSS base score of 5.5 reflects a moderate risk level. EPSS data is not provided, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, so no public exploits are currently known. However, because the flaw requires only low privileges and local login, an attacker with such access could relatively easily trigger the crash. In absence of a public exploit vector, the threat remains theoretical but should be treated with caution. Adequate patching is the most effective measure to reduce this risk.