CVE-2026-32710
Fixed in a distro release EPSS <1%CVSS 8.6
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
Products: MariaDB server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | mariadb-11.8 | 11.8.9-r1 |
| Chainguard | mariadb-12.1 | no fix |
| Debian 13 | mariadb | 1:11.8.6-0+deb13u1 |
| Debian 14 | mariadb | 1:11.8.6-1 |
| Red Hat Enterprise Linux 10.2 | galera | 0:26.4.25-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | galera-debuginfo | 0:26.4.25-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | galera-debugsource | 0:26.4.25-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8 | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-client-utils | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-common | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debugsource | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-devel | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-devel | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-errmsg | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-utils | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test-debuginfo | 3:11.8.6-2.el10_2 |
| Red Hat Enterprise Linux 9 | galera | 0:26.4.25-1.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | galera-debuginfo | 0:26.4.25-1.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | galera-debugsource | 0:26.4.25-1.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-backup | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-backup-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-client-utils | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-debugsource | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-devel | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-embedded | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-embedded-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-embedded-devel | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-gssapi-server-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-oqgraph-engine-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-pam | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-pam-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-server-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-server-galera-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-test | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Red Hat Enterprise Linux 9 | mariadb-test-debuginfo | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| Rocky Linux 10 | galera | 0:26.4.25-1.el10_2 |
| Rocky Linux 10 | mariadb11.8 | 3:11.8.6-2.el10_2 |
| Rocky Linux 9 | galera | 0:26.4.25-1.module+el9.8.0+40192+484cc2de |
| Rocky Linux 9 | mariadb | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | mariadb | 11.8.6-150700.3.12.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP7 | mariadb | 11.8.6-150700.3.12.1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | no fix |
| Ubuntu 20.04 LTS | mariadb-10.3 | no fix |
| Ubuntu 22.04 LTS | mariadb-10.6 | no fix |
| Ubuntu 24.04 LTS | mariadb | no fix |
| Ubuntu 25.10 | mariadb | no fix |
| Wolfi | mariadb-11.8 | 11.8.9-r1 |
| Wolfi | mariadb-12.1 | no fix |
| openSUSE Tumbleweed | mariadb | 11.8.6-1.1 |