CVE-2026-111879

A flaw was found in perl-DBI. When creating or opening a database table in the DBD::DBM module fails due to an error, an exclusive file lock acquired during initialization is not properly released. A user or attacker who can control connection parameters can trigger this failure, leaving the lock active indefinitely. This issue leads to a Denial of Service (DoS), as subsequent attempts by any process to access the affected table will hang permanently.

This flaw is rated Moderate because exploitation is limited to a local denial of service without enabling unauthorized data disclosure or arbitrary code execution. Under typical Red Hat Enterprise Linux deployments, exposure is constrained to environments where Perl applications utilize the DBD::DBM driver and allow untrusted inputs to influence database connection parameters. The resulting lock contention affects only downstream processes attempting to access the targeted database table, leaving unrelated system services unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.