Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-34278 EUVD-2026-24354GHSA-fh86-xhc3-24gr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.…

Published Apr 21, 2026 · Updated Apr 22, 2026 · Assigned by oracle

Vendor: Oracle Product: MySQL Server Package: mariadb-10.3 Package: mysql Package: mysql-5.5 Package: mysql-5.7 Package: mysql-8.0 Package: percona-server-5.6 Package: percona-xtradb-cluster-5.6 Ecosystem: Azure Linux Ecosystem: Ubuntu

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

VendorProductAffectedFixed
Oracle MySQL Server 8.0.0 – ≤ 8.0.45 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS mysql-8.4 8.4.9-0ubuntu0.26.04.1 USN-8363-1
Ubuntu 25.10 mysql-8.4 8.4.9-0ubuntu0.25.10.1 USN-8363-1
Ubuntu 24.04 LTS mysql-8.0 8.0.46-0ubuntu0.24.04.2 USN-8363-1
Ubuntu 22.04 LTS mysql-8.0 8.0.46-0ubuntu0.22.04.2 USN-8363-1
Ubuntu 20.04 LTS mariadb-10.3 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS percona-server-5.6 +1 No fix yet —
Ubuntu 14.04 LTS mysql-5.5 No fix yet —
Ubuntu Pro 20.04 LTS mysql-8.0 8.0.46-0ubuntu0.20.04.1+esm2 USN-8363-2
Ubuntu Pro 18.04 LTS mysql-5.7 No fix yet —
Ubuntu Pro 16.04 LTS mysql-5.7 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 mysql +6 8.0.46-1.el9_8 RHSA-2026:23332
RHEL 8 mecab +1 0.996-2.module+el8.10.0+22857+7f331edd RHSA-2026:25919
RHEL 8 mecab-ipadic +1 2.7.0.20070801-17.module+el8.10.0+22857+7f331edd RHSA-2026:25919
RHEL 8 mysql +6 8.0.46-1.module+el8.10.0+24370+d5a391f0 RHSA-2026:25919

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 mysql +6 8.0.46-1.el9_8 ALSA-2026:23332
AlmaLinux 8 mecab +1 0.996-2.module_el8.6.0+3340+d764b636 ALSA-2026:25919
AlmaLinux 8 mecab-ipadic +1 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 ALSA-2026:25919
AlmaLinux 8 mysql +6 8.0.46-1.module_el8.10.0+4192+724bc664 ALSA-2026:25919

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 mysql 8.0.46-1.el9_8.rocky.0.1 RLSA-2026:23332
Rocky Linux 8 mecab 0.996-2.module+el8.10.0+1676+9b4b6e24 RLSA-2026:25919
Rocky Linux 8 mecab-ipadic 2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 RLSA-2026:25919

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 mysql 8.0.46-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 mysql +6 8.0.46-1.el9_8 ELSA-2026-23332
Oracle Linux 8 mecab +1 0.996-2.module+el8.10.0+90675+bf1d9af8 ELSA-2026-25919
Oracle Linux 8 mecab-ipadic +1 2.7.0.20070801-17.0.1.module+el8.10.0+90675+bf1d9af8 ELSA-2026-25919
Oracle Linux 8 mysql +6 8.0.46-1.module+el8.10.0+90910+81928985 ELSA-2026-25919

Advisories 12

References