Arbitrary File Creation Vulnerability in Oracle DTrace Component
CVE-2026-21991

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Linux
Vendor
CVE Published:
16 March 2026

What is CVE-2026-21991?

The DTrace component, dtprobed, in Oracle's software suite contains a vulnerability that permits attackers to create arbitrary files by manipulating USDT provider names. This flaw can be exploited to compromise system integrity and unauthorized data access, highlighting the necessity for timely patching and security measures.

Affected Version(s)

Oracle Linux 8

Oracle Linux 9

Oracle Linux 10

References

https://linux.oracle.com/cve/CVE-2026-21991.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.