CVE-2026-21996lowCWE-369

CVE-2026-21996: low-severity vulnerability in Oracle Linux

Published

Follow this CVE+ Monitor Oracle Linux+ Monitor dtrace

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.1%
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
Oracle Corporation · Oracle Linux
Related CVEs — Oracle Linux

In the same product, most dangerous first.

CVE-2020-2732MEDIUMCVE-2020-2732EPSS 0.9%CVE-2022-21499MEDIUMCVE-2022-21499EPSS 0.6%CVE-2022-21385MEDIUMCVE-2022-21385EPSS 0.4%CVE-2021-2464HIGHCVE-2021-2464EPSS 0.3%CVE-2022-21504MEDIUMCVE-2022-21504EPSS 0.3%CVE-2022-21505MEDIUMCVE-2022-21505EPSS 0.2%