Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-21991

Fixed in a distro release EPSS <1%CVSS 5.5

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Published 2026-03-16 · CVE record · OSV

Products: Oracle Corporation Oracle Linux

Distro releases

ReleasePackageFixed in
Debian 14dtrace2.0.6-1