CVE-2008-5009: Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine...

Security readout for executives and security teams

This is a legacy local denial-of-service issue in Sun Solstice X.25 9.2. A local user on a multiprocessor system could trigger a kernel panic through the X.25 device interface, causing outage of that host. It is not described as remotely exploitable in the provided sources. Exposure is likely limited to organizations still running Sun Solstice X.25 9.2 on multiprocessor legacy Solaris-era systems with local user access. Most modern environments are unlikely to be affected unless they retain X.25 connectivity systems. Treat this as a targeted legacy availability risk. It deserves prompt handling where X.25 systems support critical operations, but it is lower priority for environments without Sun Solstice X.25 9.2 or local user exposure. Mitigation focus: Check SunSolve or Sun Alert guidance for available patches or workarounds.; Inventory and prioritize retirement of Sun Solstice X.25 9.2 systems.; Restrict local interactive access to affected hosts to trusted administrators..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.