CVE-2026-101617
mysql: mysql: Denial of Service in InnoDB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue leads to a complete Denial of Service (DoS), rendering the database service unavailable.
Statement
This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires a remote attacker to already possess high administrative privileges on the database instance. While triggering the defect in the InnoDB storage engine can cause the database service to hang or crash, resulting in a complete loss of availability, the flaw cannot be leveraged to execute arbitrary code or compromise data confidentiality and integrity. In standard Red Hat deployments, high-privilege access is restricted to authenticated administrators, significantly limiting unauthorized exposure under typical operational conditions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption