CVE-2026-44169
Fixed in a distro release EPSS <1%CVSS 4.3
MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.
Products: MariaDB server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.20 | mariadb | 10.11.17-r0 |
| Alpine 3.21 | mariadb | 11.4.11-r0 |
| Alpine 3.22 | mariadb | 11.4.11-r0 |
| Alpine 3.23 | mariadb | 11.4.11-r0 |
| Alpine 3.24 | mariadb | 11.8.7-r0 |
| Chainguard | mariadb-11.8 | 11.8.9-r1 |
| Debian 12 | mariadb | no fix |
| Debian 13 | mariadb | no fix |
| Debian 14 | mariadb | 1:11.8.8-1 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8 | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-backup-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-client-utils | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-common | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-debugsource | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-devel | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-embedded-devel | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-errmsg | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-gssapi-server-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-oqgraph-engine-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-pam-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-galera-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-server-utils | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | mariadb11.8-test-debuginfo | 3:11.8.8-1.el10_2 |
| Red Hat Enterprise Linux 9 | galera | 0:26.4.27-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | galera-debuginfo | 0:26.4.27-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | galera-debugsource | 0:26.4.27-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-backup | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-backup-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-client-utils | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-common | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-debugsource | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-devel | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-embedded | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-embedded-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-embedded-devel | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-errmsg | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-gssapi-server | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-gssapi-server-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-oqgraph-engine | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-oqgraph-engine-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-pam | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-pam-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-server | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-server-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-server-galera | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-server-galera-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-server-utils | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-test | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat Enterprise Linux 9 | mariadb-test-debuginfo | 3:11.8.8-1.module+el9.8.0+24389+c97c30be |
| Red Hat hummingbird 1 | mariadb | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-backup | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-client-utils | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-common | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-connect-engine | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-cracklib-password-check | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-devel | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-embedded | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-embedded-devel | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-errmsg | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-gssapi-server | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-oqgraph-engine | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-pam | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-rocksdb-engine | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-s3-engine | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-server | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-server-galera | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-server-utils | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-sphinx-engine | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb-test | 0:11.8.8-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11 | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-backup | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-client-utils | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-common | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-connect-engine | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-cracklib-password-check | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-devel | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-embedded-devel | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-errmsg | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-gssapi-server | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-oqgraph-engine | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-pam | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-rocksdb-engine | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-s3-engine | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-galera | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-server-utils | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-sphinx-engine | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb10.11-test | 0:10.11.18-1.hum1 |
| Red Hat hummingbird 1 | mariadb11.8 | 0:11.8.8-1.hum1 |
| Rocky Linux 10 | galera | 0:26.4.27-1.el10_2 |
| Rocky Linux 10 | mariadb10.11 | 3:10.11.18-1.el10_2 |
| Rocky Linux 9 | galera | 0:26.4.27-1.module+el9.8.0+40232+a354f53a |
| Rocky Linux 9 | galera | 0:26.4.27-1.module+el9.8.0+40229+87be66a2 |
| Rocky Linux 9 | mariadb | 3:11.8.8-1.module+el9.8.0+40229+87be66a2 |
| Rocky Linux 9 | mariadb | 3:10.11.18-1.module+el9.8.0+40232+a354f53a |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | mariadb | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP7 | mariadb | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise Server 16.0 | mariadb | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | mariadb | 11.8.8-160000.1.1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | no fix |
| Ubuntu 18.04 LTS | mariadb-10.1 | no fix |
| Ubuntu 20.04 LTS | mariadb-10.3 | no fix |
| Ubuntu 22.04 LTS | mariadb-10.6 | no fix |
| Ubuntu 24.04 LTS | mariadb | no fix |
| Ubuntu 25.10 | mariadb | no fix |
| Ubuntu 26.04 LTS | mariadb | 1:11.8.6-5ubuntu0.1 |
| Wolfi | mariadb-11.8 | 11.8.9-r1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 |
| openSUSE Tumbleweed | mariadb | 11.8.7-1.1 |