CVE-2026-101611
mysql: mysql: Denial of Service in InnoDB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service (DoS), disrupting normal operations and rendering the database unavailable.
Statement
This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because successful exploitation requires high administrative privileges alongside complex conditions to trigger a denial of service. In standard enterprise deployments, MySQL services reside in restricted network segments with elevated database credentials tightly managed. While satisfying these prerequisite permissions can allow an attacker to cause the database daemon to hang or crash, confidentiality and integrity of stored records remain unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption