CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - secalert_us@oracle.com

Published

2026-03-16

Last modified

2026-03-17

Weaknesses

CWE-22

Affected products

• Linux (Oracle)
• Oracle Linux (Oracle Corporation)

References

• https://linux.oracle.com/cve/CVE-2026-21991.html