VDB
RHSA-2026:83108
RHSA-2026:83108
PUBLISHED
CVSS 7.199999809265137 HIGH
A flaw was found in MariaDB. An authenticated database user with file write permissions can create an unauthorized configuration file in the service runtime directory. During a subsequent service restart, the service unit loads this file and injects attacker-controlled environment variables into the process. This flaw allows an attacker to escalate privileges and potentially achieve arbitrary code execution on the underlying host system.
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | mariadb10.11-test-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-test |
| Red Hat | mariadb10.11-0:10.11.18-4.1.hum1@s390x as a component of Red Hat Hardened Images | 10.11-0 |
| Red Hat | mariadb10.11-server-utils-0:10.11.18-4.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 10.11-server |
| Red Hat | mariadb10.11-server-galera-0:10.11.18-4.1.hum1@s390x as a component of Red Hat Hardened Images | 10.11-server |
| Red Hat | mariadb10.11-common-0:10.11.18-4.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 10.11-common |
| Red Hat | mariadb10.11-pam-0:10.11.18-4.1.hum1@aarch64 as a component of Red Hat Hardened Images | 10.11-pam |
| Red Hat | mariadb10.11-server-galera-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-server |
| Red Hat | mariadb10.11-errmsg-0:10.11.18-4.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 10.11-errmsg |
| Red Hat | mariadb10.11-pam-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-pam |
| Red Hat | mariadb10.11-pam-0:10.11.18-4.1.hum1@s390x as a component of Red Hat Hardened Images | 10.11-pam |
| Red Hat | mariadb10.11-client-utils-0:10.11.18-4.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images | 10.11-client |
| Red Hat | mariadb10.11-s3-engine-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-s3 |
| Red Hat | mariadb10.11-cracklib-password-check-0:10.11.18-4.1.hum1@aarch64 as a component of Red Hat Hardened Images | 10.11-cracklib |
| Red Hat | mariadb10.11-server-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-server |
| Red Hat | mariadb10.11-embedded-devel-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-embedded |
| Red Hat | mariadb10.11-gssapi-server-0:10.11.18-4.1.hum1@aarch64 as a component of Red Hat Hardened Images | 10.11-gssapi |
| Red Hat | mariadb10.11-sphinx-engine-0:10.11.18-4.1.hum1@x86_64 as a component of Red Hat Hardened Images | 10.11-sphinx |
| Red Hat | mariadb10.11-client-utils-0:10.11.18-4.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images | 10.11-client |
| Red Hat | mariadb10.11-server-utils-0:10.11.18-4.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images | 10.11-server |
| Red Hat | mariadb10.11-gssapi-server-0:10.11.18-4.1.hum1@s390x as a component of Red Hat Hardened Images | 10.11-gssapi |
…and 39 more
Timeline
- Oct 14, 2026 CVE Published
- Oct 15, 2026 CVE Updated
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
References
- https://www.cve.org/CVERecord?id=CVE-2026-107814 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107814 advisory
- https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 advisory
- https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 advisory
- https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2548718 issue
- https://www.cve.org/CVERecord?id=CVE-2026-107815 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107815 advisory
- https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8 advisory
- https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq advisory
- https://jira.mariadb.org/browse/MDEV-40637 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2548739 issue
- https://www.cve.org/CVERecord?id=CVE-2026-107816 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107816 advisory
- https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e advisory
…and 45 more