Moderate Security Vulnerability in MySQL 8.4: Multiple Unspecified Issues
Summary
RLSA-2026:4162: Moderate: mysql8.4 security update. Affects mysql8.4 versions < 0:8.4.8-1.el10_1.rocky.0.1. Fixed in 0:8.4.8-1.el10_1.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MySQL is a widely used multi-user, multi-threaded SQL database server that operates on a client/server model. It comprises a server daemon (mysqld) and various client programs and libraries. MySQL is known for its reliability, performance, and ease of use, making it a popular choice for applications requiring a robust database solution. However, recent updates have revealed multiple unspecified vulnerabilities that could potentially impact its security.
Vulnerability Detail
The vulnerabilities in MySQL 8.4 stem from unspecified issues within the optimizer, InnoDB, DDL, and thread pooling components. These vulnerabilities were identified during the January 2026 Critical Patch Update (CPU) and could allow unauthorized access or manipulation of database operations. The potential ramifications include data corruption, unauthorized data access, and performance degradation, which could severely affect applications relying on MySQL for data management.
How To Fix
Minimum fixed version
0:8.4.8-1.el10_1.rocky.0.1
This is the first release that contains the fix.
sudo dnf update mysql8.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for these vulnerabilities. It is recommended to apply the security update as soon as it is available to mitigate any risks.
Conclusion
In summary, MySQL 8.4 has been identified with multiple unspecified vulnerabilities that could pose a moderate risk to users. It is essential to update to the latest patched version to ensure the security and integrity of your database operations. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for mysql8.4 →
FAQ
The main vulnerabilities include unspecified issues in the optimizer, InnoDB, DDL, and thread pooling components, which were identified in the January 2026 CPU.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The CVSS score for the vulnerabilities in MySQL 8.4 is 6.5, indicating a moderate level of risk.
While there are no specific workarounds, it is crucial to prioritize updating MySQL to the patched version to mitigate risks associated with these vulnerabilities.
The Rocky Enterprise Software Foundation and Red Hat are responsible for providing security updates and patches for MySQL in the Rocky Linux ecosystem.
References
Related vulnerabilities
Recent vulnerabilities recorded for mysql8.4.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
