How many CVEs have a located fix in illumos/illumos-gate?

13 published CVEs have a fix traced to functions in illumos/illumos-gate, touching 10 functions across 25 files.

Which function in illumos/illumos-gate has been patched by the most CVEs?

_nscd_proc_iamhere in usr/src/cmd/nscd/nscd_selfcred.h has been changed by 1 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in illumos/illumos-gate?

The median fix changes 39 lines. 31% of fixes change 20 lines or fewer, and 31% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

assembly

#457 of 500 repositories

illumos/illumos-gate

Name: illumos/illumos-gate: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 9, 2026

13

CVE fixes located

Published CVEs

10

Functions patched

Distinct function sites

25

Files patched

Distinct source files

2015–2026

Years covered

By CVE publication date

Overview

13 published CVEs have a fix traced to functions in illumos/illumos-gate, the earliest published in 2015. Those fixes changed 10 distinct functions across 25 files, in 318 patch hunks.

Among the 500 repositories tracked here, illumos/illumos-gate ranks #457 by the number of CVEs with a located fix.

Most patched functions

Functions in illumos/illumos-gate changed by the most CVE fixes.

Most patched files

Files in illumos/illumos-gate changed by the most CVE fixes.

1usr/src/uts/common/inet/sctp/sctp_impl.h1 CVEs · 3 functions
2usr/src/cmd/nscd/nscd_selfcred.h1 CVEs · 1 functions
3usr/src/lib/libdladm/common/linkprop.c1 CVEs · 1 functions
4usr/src/uts/common/fs/tmpfs/tmp_dir.c1 CVEs · 1 functions
5usr/src/uts/common/inet/sctp/sctp_hash.c1 CVEs · 1 functions
6usr/src/uts/common/sys/dld.h1 CVEs · 1 functions
7usr/src/uts/intel/ia32/ml/copy.s1 CVEs · 1 functions
8usr/src/uts/intel/io/vmm/vmm_instruction_emul.c1 CVEs · 1 functions
9usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c1 CVEs · 0 functions
10usr/src/cmd/cmd-inet/lib/nwamd/door_if.c1 CVEs · 0 functions

Fix size

How much code a CVE fix in illumos/illumos-gate changes, with backports counted once.

39

Median lines changed

Added plus removed, per CVE

31%

Fixes of 20 lines or fewer

Share of CVE fixes

31%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in illumos/illumos-gate, and the functions each fix changed.

Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon
CVE-2026-104115
Medium · CVSS 5.4
EPSS 0.1%2026-10-09
NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
CVE-2026-104114
Medium · CVSS 5.4
EPSS 0.1%2026-10-09
Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory
CVE-2026-104112_nscd_proc_iamhere
Medium · CVSS 6.8
EPSS 0.1%2026-10-09
Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones
CVE-2026-104116
Low · CVSS 1.9
EPSS 0.1%2026-10-09
Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership
CVE-2026-104117
Low · CVSS 1.9
EPSS 0.1%2026-10-09
Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host
CVE-2026-102916vm_reg_name
Medium · CVSS 6.8
EPSS 0.1%2026-10-09
SCTP needs to better-check INIT ACK chunk parameters
CVE-2026-15422tsol_receive_local sctp_addrlist2sctp sctp_bind_add
Critical · CVSS 9.1
EPSS 0.9%2026-07-16
TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption
CVE-2026-15449dld_ioc_macprop_s prop_desc
Medium · CVSS 5.8
EPSS 0.1%2026-07-16
CVE-2021-43395
CVE-2021-43395tdiraddentry
Medium · CVSS 5.5
EPSS 0.3%2022-12-26
CVE-2020-27678
CVE-2020-27678
Critical · CVSS 9.8
EPSS 1.4%2020-10-23
CVE-2016-6560
CVE-2016-6560bytes
High · CVSS 8.6
EPSS 1.7%2017-03-31
CVE-2016-6561
CVE-2016-6561
High · CVSS 7.5
EPSS 2.5%2017-03-31

Get an alert for each new illumos/illumos-gate CVE, with the patched functions and AI-written analysis.

Monitor illumos-gate CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/kylin13 CVEs apache/superset13 CVEs bagisto/bagisto13 CVEs better-auth/better-auth13 CVEs caddyserver/caddy13 CVEs cerebrate-project/cerebrate13 CVEs CoreWCF/CoreWCF13 CVEs craftcms/commerce13 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in illumos/illumos-gate.

How many CVEs have a located fix in illumos/illumos-gate?: 13 published CVEs have a fix traced to functions in illumos/illumos-gate, touching 10 functions across 25 files.
Which function in illumos/illumos-gate has been patched by the most CVEs?: _nscd_proc_iamhere in usr/src/cmd/nscd/nscd_selfcred.h has been changed by 1 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in illumos/illumos-gate?: The median fix changes 39 lines. 31% of fixes change 20 lines or fewer, and 31% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track illumos/illumos-gate CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing