CVE-2026-107822
Fixed in a distro release EPSS <1%CVSS 6.4
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Products: MariaDB server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | mariadb1011 | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-backup | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-client-utils | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-common | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-connect-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-cracklib-password-check | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-devel | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-errmsg | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-gssapi-server | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-oqgraph-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-pam | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-rocksdb-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-server | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-server-utils | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-sphinx-engine | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb1011-test | 3:10.11.19-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114 | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-backup | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-client-utils | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-common | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-connect-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-cracklib-password-check | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-devel | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-errmsg | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-gssapi-server | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-oqgraph-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-pam | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-rocksdb-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-server | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-server-utils | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-sphinx-engine | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb114-test | 3:11.4.13-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118 | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-backup | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-client-utils | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-common | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-connect-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-cracklib-password-check | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-devel | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-errmsg | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-gssapi-server | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-oqgraph-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-pam | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-rocksdb-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-server | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-server-utils | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-sphinx-engine | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb118-test | 3:11.8.9-1.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123 | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-backup | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-client-utils | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-common | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-connect-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-cracklib-password-check | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-devel | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-errmsg | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-gssapi-server | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-oqgraph-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-pam | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-rocksdb-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-server | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-server-utils | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-sphinx-engine | 3:12.3.3-2.amzn2023.0.1 |
| Amazon Linux 2023 | mariadb123-test | 3:12.3.3-2.amzn2023.0.1 |
| Debian 12 | mariadb | no fix |
| Debian 13 | mariadb | no fix |
| Debian 14 | mariadb | 1:11.8.9+ds-1 |
| Red Hat hummingbird 1 | mariadb10.11 | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-backup | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-client-utils | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-common | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-connect-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-cracklib-password-check | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-devel | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded-devel | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-errmsg | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-gssapi-server | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-oqgraph-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-pam | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-rocksdb-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-s3-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-galera | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-utils | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-sphinx-engine | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-test | 0:10.11.18-4.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8 | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-backup | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-client-utils | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-common | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-connect-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-cracklib-password-check | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-devel | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-duckdb-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-embedded | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-embedded-devel | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-errmsg | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-gssapi-server | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-oqgraph-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-pam | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-rocksdb-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-s3-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server-galera | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-server-utils | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-sphinx-engine | 0:11.8.9-0.1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8-test | 0:11.8.9-0.1.hum1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | no fix |
| Ubuntu 18.04 LTS | mariadb-10.1 | no fix |
| Ubuntu 20.04 LTS | mariadb-10.3 | no fix |
| Ubuntu 22.04 LTS | mariadb-10.6 | no fix |
| Ubuntu 24.04 LTS | mariadb | no fix |
| Ubuntu 26.04 LTS | mariadb | no fix |
| Ubuntu 26.10 | mariadb | no fix |
| openSUSE Tumbleweed | mariadb | 12.3.2-3.1 |