CVE-2026-88815: Denial of service in perl-DBI numeric type casting
Summary
ALSA-2026:85916: Invalid memory reads during numeric type casting can cause a denial of service, disrupting applications that rely on database operations. Affects perl-DBI versions < 1.641-11.module_el8.10.0+4309+f7cd2555. Fixed in 1.641-11.module_el8.10.0+4309+f7cd2555. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
perl-DBI is a database interface package in the AlmaLinux:8 ecosystem. It provides the standard database interface module for Perl and defines consistent methods, variables, and conventions for database operations. Applications use it to interact with databases through a database-independent interface.
Vulnerability Detail
An invalid memory read during numeric type casting can cause a denial of service in perl-DBI. The issue affects the package's numeric type-casting behavior and may disrupt applications that use it for database operations. The advisory identifies the issue as CVE-2026-88815. A CVSS score is not published in the supplied information.
How To Fix
Minimum fixed version
1.641-11.module_el8.10.0+4309+f7cd2555
This is the first release that contains the fix.
sudo dnf update perl-DBITip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
AI-generated workaround (not vendor-documented): Restrict access to applications that use perl-DBI and validate numeric inputs before they reach database operations. This can reduce exposure while an upgrade is pending, but does not replace applying the fixed package.
Conclusion
Upgrade perl-DBI to 1.641-11.module_el8.10.0+4309+f7cd2555. This addresses the published denial-of-service issue associated with invalid memory reads during numeric type casting. Review application manifests or SBOMs to identify dependency use and confirm the deployed package is updated. Vulert monitors the dependencies in a manifest file like package-lock.json and alerts when a new vulnerability affects them; check an application at https://vulert.com/scanner.
See every vulnerability recorded for perl-DBI →
FAQ
The supplied advisory marks perl-DBI as affected from the introduction event and fixed at 1.641-11.module_el8.10.0+4309+f7cd2555.
CVE-2026-88815 can cause a denial of service in perl-DBI through an invalid memory read during numeric type casting.
Upgrade perl-DBI to the minimum fixed version 1.641-11.module_el8.10.0+4309+f7cd2555.
Restrict access to applications using perl-DBI and validate numeric inputs before database operations; this is an AI-generated mitigation, not vendor guidance.
Inspect a manifest or SBOM for perl-DBI. Vulert can scan a manifest or SBOM and monitor the dependency at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for perl-DBI.
