CVE-2025-50092

A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server.

A moderate severity denial of service flaw was found in the InnoDB component of MySQL. A highly privileged attacker with network access via multiple protocols could exploit this flaw to cause the MySQL server to hang or crash repeatedly, resulting in a complete denial of service of the MySQL server; confidentiality and integrity are not impacted. The mysql packages and the mysql:8.0 and mysql:8.4 module streams in Red Hat Enterprise Linux 8, 9, and 10 are affected, and fixes for those products are being pursued through the delegated update process for this component. The mysql8.0 and mysql8.4 packages in Fedora are affected, but the community package update has been deferred, leaving Fedora users exposed to the denial of service until a future update is released. MySQL in Red Hat Enterprise Linux 6 Extended Life Cycle Support is not affected because the vulnerable code is not present in that version. For Red Hat In-Vehicle OS, the component is delegated and recorded as not affected. Red Hat rates this flaw as moderate impact with a CVSS 3.1 base score of 4.3, slightly lower than the upstream Oracle score of 4.9, reflecting Red Hat's assessment of lower privileges required combined with reduced availability impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. For Red Hat Enterprise Linux, updated mysql packages that address this flaw have been delivered through the standard update channels of the affected releases, and users are advised to apply them. For Fedora, the package update is deferred; users should apply future mysql package updates when they become available.