CVE-2026-101622
mysql: mysql: Denial of Service in InnoDB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.
Statement
This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires an attacker to already possess high-level database privileges over the network. Although triggering the defect can lead to a complete service outage by causing the database server to hang or terminate unexpectedly, the requirement for administrative credentials limits the blast radius and prevents unauthenticated attacks. Confidentiality and data integrity remain unaffected, as the flaw solely impacts service availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption