CVE-2026-21996 - An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

Back Back to CVE browser

MEDIUM

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

Published May 1, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.11%

Description

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()

Affected products

Vendor Oracle Corporation Product Oracle Linux Default
unknown
Affected
- 10
- 8
- 9

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Oracle Corporation	Oracle Linux	unknown	Affected 10 8 9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-369

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26700
Advisory
https://linux.oracle.com/cve/CVE-2026-21996.html
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26700		Advisory
https://linux.oracle.com/cve/CVE-2026-21996.html		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner oracle

Published May 1, 2026

Updated May 1, 2026

Reserved Jan 5, 2026

Link CVE-2026-21996

CISA Vulnrichment

Updated May 1, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-21996

Red Hat

No data

ENISA EUVD

Assigner oracle

Published May 1, 2026

Updated May 1, 2026

Link EUVD-2026-26700

GitHub

No data