CVE-2026-21996
Fixed in a distro release EPSS <1%CVSS 3.3
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
Products: Oracle Corporation Oracle Linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:14 | dtrace | 2.0.7-1 |
| Ubuntu:26.04:LTS | dtrace | no fix |
| Ubuntu:26.10 | dtrace | no fix |