Back Linuxsecurity

Ubuntu MySQL Important DoS Vulnerabilities USN-8457-1 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 22, 2026

Several security issues were fixed in MySQL. Software Description: - mysql-8.4: MySQL database - mysql-8.0: MySQL database Details: It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthenticated remote attacker could possibly use this issue to cause MySQL Router to crash, resulting in a denial of service. (CVE-2026-46862) It was discovered that MySQL Server incorrectly handled connection authentication. An unauthenticated remote attacker could possibly use this issue to cause MySQL to crash, resulting in a denial of service. (CVE-2026-46863)

Several security issues were fixed in MySQL.

Software Description:

- mysql-8.4: MySQL database

- mysql-8.0: MySQL database

It was discovered that MySQL Router incorrectly handled repeated TLS

protocol upgrade requests. An unauthenticated remote attacker could

possibly use this issue to cause MySQL Router to crash, resulting in a

denial of service. (CVE-2026-46862)

It was discovered that MySQL Server incorrectly handled connection

authentication. An unauthenticated remote attacker could possibly use this

issue to cause MySQL to crash, resulting in a denial of service.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS mysql-server 8.4.10-0ubuntu0.26.04.1 Ubuntu 25.10 mysql-server 8.4.10-0ubuntu0.25.10.1 Ubuntu 24.04 LTS mysql-server-8.0 8.0.46-0ubuntu0.24.04.3 Ubuntu 22.04 LTS mysql-server-8.0 8.0.46-0ubuntu0.22.04.3 This update may use a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.

CVE-2026-46862, CVE-2026-46863

Ubuntu Security Notice USN-8457-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical MySQL Denial of Service Vulnerabilities in Ubuntu 20.04 LTS Two critical denial of service vulnerabilities were discovered in MySQL affecting Ubuntu 20.04 LTS. The vulnerabilities, identified as CVE-2026-46862 and CVE-2026-46863, allow unauthenticated remote attackers to crash MySQL Router and MySQL Server, respectively. The issues stem from improper handling of TLS protocol upgrade requests and connection authentication. Users of MySQL version 8.0 on Ubuntu 20.04 LTS are particularly at risk. The vulnerabilities were published on June 16, 2026, and have been addressed in the latest security update. Administrators are advised to update their systems to mitigate the risks. The update is available through standard system updates for Ubuntu Pro users. The potential impact includes service disruption for applications relying on MySQL. 2 sources 72

Extracted Entities

Ubuntu MySQL Important DoS Vulnerabilities USN-8457-1 CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

Platforms (2)