CVE-2009-0838: Sun Opensolaris

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.

Affected products

• Sun Opensolaris: version snv_88 only; version snv_89 only; version snv_90 only; version snv_91 only; version snv_92 only; version snv_93 only; …
• Sun Sunos: version 5.10 only

Published 2009-03-06. Last modified 2026-06-16.