Local Resource Exhaustion Vulnerability in Illumos Name Service Cache Daemon

CVE-2026-104112

What is CVE-2026-104112?

A vulnerability in the illumos name service cache daemon (nscd) allows local users to exploit a flaw in resource handling, leading to a denial of service. The nscd door server does not adequately release file descriptors, allowing unprivileged local users, including those in non-global zones, to repeatedly send descriptors through the door call. This improperly managed resource can cause the file descriptor table of nscd to expand indefinitely in kernel memory, potentially rendering processes across all zones unresponsive. This persistent issue has remained unaddressed since its introduction in 2006.

References