CVE-2026-21996: Divide by Zero
Published May 1, 2026
·Updated
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
Affected Software
4 affected components
DTrace
Oracle Linux=8
Oracle Linux=9-0
Oracle Linux=10-0
Event History
May 1, 2026
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-21996?
The severity of CVE-2026-21996 is classified as high due to the potential for exploitation leading to denial of service.
2
How do I fix CVE-2026-21996?
To fix CVE-2026-21996, ensure you update to the latest version of DTrace that patches this vulnerability.
3
What type of attack can exploit CVE-2026-21996?
CVE-2026-21996 can be exploited by an unprivileged attacker with a malicious ELF binary that triggers a crash.
4
Which software is affected by CVE-2026-21996?
CVE-2026-21996 specifically affects the DTrace tool.
5
What is the impact of CVE-2026-21996 on the DTrace process?
The impact of CVE-2026-21996 is a crash of the DTrace process, resulting in service disruption.