Vulnerabilities

TI-2026-12978 CVE-2026-15422 · GHSA-7fj7-gprr-x7fm

SCTP needs to better-check INIT ACK chunk parameters

MEDIUM 49

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00882 Published 2026-07-16 Fixed in r151058j, r151056aj +2 CWE-122

TI-2026-12996 CVE-2026-15449 · GHSA-5jqp-7hrf-w792

TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption

LOW 25

A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00116 Published 2026-07-16 Fixed in r151058j, r151056aj +2 CWE-122

Vulnerabilities

Filters

SCTP needs to better-check INIT ACK chunk parameters

TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption