CVE-2026-101752
mysql: mysql: Denial of Service in Server: Components Services
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the MySQL Server Components Services. A high-privileged remote attacker with network access can exploit this vulnerability under specific conditions to cause a Denial of Service (DoS). Successful exploitation allows an attacker to cause the server to hang or crash repeatedly, disrupting availability.
Statement
This vulnerability is rated with a Moderate severity impact because triggering the denial of service requires an attacker to possess elevated administrative privileges and successfully navigate high attack complexity. Red Hat Enterprise Linux is not affected by this flaw, as the vulnerable Server Components Services architecture was introduced in later upstream releases that are not present in supported enterprise platforms. The risk is further constrained because the issue only impacts service availability, leaving data confidentiality and integrity intact.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')