CVE-2026-21996

LOW3.3

JSON export Create alert

Description

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected products

Oracle Corporation / Oracle Linux8 – 8
Oracle Corporation / Oracle Linux9 – 9
Oracle Corporation / Oracle Linux10 – 10

References

VENDOR_ADVISORYhttps://linux.oracle.com/cve/CVE-2026-21996.html

Updated 29m ago · 8 sources