CVE-2026-101760
mysql: mysql: Denial of service in InnoDB
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a denial of service (DoS).
Statement
This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because successful exploitation requires high-privileged database credentials, substantially narrowing the attack vector to trusted administrative accounts. Although an authenticated privileged user could trigger a denial of service by causing the InnoDB engine to hang or terminate unexpectedly, there is no impact on data confidentiality or system integrity. Standard enterprise environments generally isolate database interfaces and strictly control administrative privileges, which significantly lessens operational exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption