CVE Database›Document archive›CVE-2026-101611

CVE-2026-101611

mysql: mysql: Denial of Service in InnoDB

Loading…

Severity

Moderate

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service (DoS), disrupting normal operations and rendering the database unavailable.

Statement

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because successful exploitation requires high administrative privileges alongside complex conditions to trigger a denial of service. In standard enterprise deployments, MySQL services reside in restricted network segments with elevated database credentials tightly managed. While satisfying these prerequisite permissions can allow an attacker to cause the database daemon to hang or crash, confidentiality and integrity of stored records remain unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-400 · Uncontrolled Resource Consumption