CVE-2009-2857: Oracle Opensolaris

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.

Affected products

• Oracle Opensolaris: before snv_103 (fixed in snv_103)
• Oracle Solaris: version 8 only; version 9 only; version 10 only

Published 2009-08-19. Last modified 2026-06-16.