CVE-2026-101614
mysql: mysql: Denial of Service in InnoDB component
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 24, 2026
Description
A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. This issue results in a complete Denial of Service (DoS), rendering the database service unavailable to legitimate users.
Statement
This vulnerability is evaluated as Moderate because successful exploitation requires an attacker to possess elevated database privileges, substantially lowering the likelihood of exploitation in standard production environments. While an attack can lead to a complete denial of service through an unrecoverable hang or crash, it cannot compromise system confidentiality or modify database contents. In standard Red Hat deployments, high-privilege access to database management interfaces is strictly restricted to trusted administrative personnel.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption