CVE-2026-101618
mysql: mysql: Denial of Service in InnoDB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service (DoS). Successful exploitation allows the attacker to trigger a hang or repeatable server crash, rendering the database unavailable.
Statement
Red Hat rates this vulnerability with Moderate severity because successful exploitation requires high-level administrative credentials on the MySQL database. While an authenticated administrator can cause the daemon to hang or terminate abruptly through InnoDB operations, the flaw cannot lead to unauthorized information disclosure or privilege escalation. Unauthenticated users and accounts with standard privileges cannot trigger this condition under typical configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion