This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-61081 →

DEBIAN-CVE-2026-61081

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affecte...

Original description

The description as published by the source.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.11.19-0+deb12u1"}]}]

Debian:13 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 mariadb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.9+ds-1"}]}]

References

advisory security-tracker.debian.org