Findings

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Published Mar 16, 2026 · updated Jun 17, 2026 · oracle linux

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

Affected

  • cpe oracle/linux10
  • cpe oracle/linux8
  • cpe oracle/linux9

Sources

  • CVE.orgVulnerability recordCVE-2026-21991

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-21991

    A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

    nvd.nist.gov

References

CVE-2026-21991 · ZeroDay Findings