Back Linuxsecurity

Oracle Linux 8 ELSA-2026-50152 dtrace Moderate CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 14, 2026

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement: The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

dtrace-2.0.6-1.el8.x86_64.rpm dtrace-devel-2.0.6-1.el8.x86_64.rpm dtrace-testsuite-2.0.6-1.el8.x86_64.rpm

dtrace-2.0.6-1.el8.aarch64.rpm dtrace-devel-2.0.6-1.el8.aarch64.rpm dtrace-testsuite-2.0.6-1.el8.aarch64.rpm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux dtrace Vulnerability Fixes Released for Multiple Versions On March 14, 2026, Oracle released security updates addressing a moderate risk vulnerability in the dtrace component across multiple versions of Oracle Linux. The vulnerability, identified as CVE-2026-21991, involves unsafe probe description handling in the dtprobed tool. Affected versions include Oracle Linux 8, 9, and the specific ELSA-2026-50153 advisory for Oracle Linux. The issue was reported by Dhiraj Mishra and has been assigned a moderate severity rating. The updates include patched RPM packages for both x86_64 and aarch64 architectures. Users are advised to apply these updates promptly to mitigate potential exploitation risks. No active exploitation has been reported at this time. 3 sources 57

Extracted Entities

CVEs (1)

CVE-2026-21991

Platforms (1)

Oracle Linux