CVE-2026-21991 A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names

Description

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Affected products and versions

Product	Affected versions	Fixed in
Oracle Linux	10	No fix stated
Oracle Linux	9	No fix stated
Oracle Linux	8	No fix stated

Other CVEs of Oracle Linux

The 10 CVEs of Oracle Linux →

CVE-2026-35233 An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link… 4.4 Medium CVE-2026-21996 An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an… 3.3 Low CVE-2022-21505 In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with… 6.7 Medium CVE-2023-22024 In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and… 5.5 Medium