CVE-2026-102916 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

[
  {
    "vendor": "illumos",
    "product": "illumos-gate",
    "platforms": [
      "x86"
    ],
    "collectionURL": "https://illumos.org",
    "packageName": "system/bhyve",
    "repo": "https://github.com/illumos/illumos-gate",
    "modules": [
      "kernel",
      "bhyve",
      "vmm"
    ],
    "programFiles": [
      "usr/src/uts/intel/io/vmm/vmm_instruction_emul.c"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "e0c0d44e917080841514d0dd031a696c74e8c435",
        "lessThan": "696ecf8debceed9dc33937d8c8e111e4aeebfdae",
        "changes": [
          {
            "at": "696ecf8debceed9dc33937d8c8e111e4aeebfdae",
            "status": "unaffected"
          }
        ],
        "versionType": "git"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "OmniOS",
    "product": "OmniOS",
    "versions": [
      {
        "status": "affected",
        "version": "any",
        "lessThan": "r151054",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "r151058",
        "lessThan": "r151058w",
        "changes": [
          {
            "at": "r151058w",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "r151056",
        "lessThan": "r151056aw",
        "changes": [
          {
            "at": "r151056aw",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "r151054",
        "lessThan": "r151054bw",
        "changes": [
          {
            "at": "r151054bw",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]