Improper input validation in MySQL Server - CVE-2025-21490

Vulnerability identifier: #VU103188

CSH Severity: Medium

CVSS v4 BT: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2025-21490

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the InnoDB component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

MySQL Server
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
Galera for Ericsson 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Slackware Linux
SUSE Package Hub 15
Server Applications Module
openSUSE Leap
openEuler
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
mecab
Judy-devel
Judy
asio-devel
mecab-ipadic-EUCJP
mecab-ipadic
mysql-server-8.0 (Ubuntu package)
mysql-errmsg
mysql-help
mysql-libs
mysql-server
mysql-test
mysql
mysql-debugsource
mysql-debuginfo
mysql-common
mysql-config
mysql-devel
mysql (Red Hat package)
mariadb
mariadb-server-galera
mariadb-server-utils
mariadb-test
mariadb-backup
mariadb-common
mariadb-config
mariadb-debuginfo
mariadb-debugsource
mariadb-devel
mariadb-embedded
mariadb-embedded-devel
mariadb-errmsg
mariadb-gssapi-server
mariadb-oqgraph-engine
mariadb-pam
mariadb-rocksdb-engine
mariadb-server
mariadb (Red Hat package)
mariadb-client-debuginfo
libmariadbd19
mariadb-bench
libmariadbd19-debuginfo
mariadb-tools
mariadb-client
mariadb-tools-debuginfo
mariadb-test-debuginfo
mariadb-rpm-macros
libmariadbd-devel
mariadb-galera
mariadb-bench-debuginfo
mariadb-errormessages
mariadb-server (Ubuntu package)
mariadb10.11 (Red Hat package)
galera
galera (Red Hat package)
Storage Resource Manager
Dell EMC Storage Monitoring and Reporting (SMR)

Install updates from vendor's website.

MySQL Server - addressed in versions 8.0.41, 8.4.4, 9.2.0
mecab - update to 0.996-2
Judy-devel - update to 1.0.5-18
Judy - update to 1.0.5-18
asio-devel - update to 1.10.8-7
mecab-ipadic-EUCJP - update to 2.7.0.20070801-17.0.1
mecab-ipadic - update to 2.7.0.20070801-17.0.1
Storage Resource Manager - addressed in versions 5.0.2.2, 5.1.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - addressed in versions 5.0.2.2, 5.1.0.0
mysql-server-8.0 (Ubuntu package) - addressed in versions 8.0.41-0ubuntu0.20.04.1, 8.0.41-0ubuntu0.22.04.1, 8.0.41-0ubuntu0.24.04.1, 8.0.41-0ubuntu0.24.10.1
mysql-errmsg - update to 8.0.41-1
mysql-help - update to 8.0.41-1
mysql-libs - update to 8.0.41-1
mysql-server - update to 8.0.41-1
mysql-test - update to 8.0.41-1
mysql - update to 8.0.41-1
mysql-debugsource - update to 8.0.41-1
mysql-debuginfo - update to 8.0.41-1
mysql-common - update to 8.0.41-1
mysql-config - update to 8.0.41-1
mysql-devel - update to 8.0.41-1
mysql-errmsg - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql-test - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql-server - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql-libs - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql-devel - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql-common - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql - addressed in versions 8.0.41-1.0.1, 8.0.44-1
mysql (Red Hat package) - update to 8.0.41-2.el9_5
mariadb - update to 10.5.28
mariadb-server-galera - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-server-utils - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-test - addressed in versions 10.5.28-1, 10.5.29-1
mariadb - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-backup - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-common - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-config - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-debuginfo - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-debugsource - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-devel - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-embedded - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-embedded-devel - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-errmsg - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-gssapi-server - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-oqgraph-engine - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-pam - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-rocksdb-engine - addressed in versions 10.5.28-1, 10.5.29-1
mariadb-server - addressed in versions 10.5.28-1, 10.5.29-1
mariadb (Red Hat package) - update to 10.5.29-2.el9_6
mariadb-test - update to 10.5.29-2.0.1
mariadb-server-utils - update to 10.5.29-2.0.1
mariadb-server-galera - update to 10.5.29-2.0.1
mariadb-server - update to 10.5.29-2.0.1
mariadb-pam - update to 10.5.29-2.0.1
mariadb-oqgraph-engine - update to 10.5.29-2.0.1
mariadb-gssapi-server - update to 10.5.29-2.0.1
mariadb-errmsg - update to 10.5.29-2.0.1
mariadb-embedded - update to 10.5.29-2.0.1
mariadb-devel - update to 10.5.29-2.0.1
mariadb-common - update to 10.5.29-2.0.1
mariadb-backup - update to 10.5.29-2.0.1
mariadb - update to 10.5.29-2.0.1
mariadb-embedded-devel - update to 10.5.29-2.0.1
mariadb-debugsource - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-client-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
libmariadbd19 - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-test - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-bench - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
libmariadbd19-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-tools - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-client - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-tools-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-test-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-rpm-macros - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
libmariadbd-devel - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-galera - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-bench-debuginfo - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-errormessages - addressed in versions 10.5.29-150300.3.55.1, 10.6.23-150400.3.40.1, 10.11.11-150600.4.10.1
mariadb-server (Ubuntu package) - addressed in versions 1:10.6.21-0ubuntu0.22.04.2, 1:10.11.11-0ubuntu0.24.04.2, 1:11.4.5-0ubuntu0.24.10.1
mariadb10.11 (Red Hat package) - update to 10.11.15-1.el10_1
galera - update to 26.4.22-1
galera (Red Hat package) - update to 26.4.22-1.el9_6

• https://www.oracle.com/security-alerts/cpujan2025.html

• Multiple vulnerabilities in MySQL Server
• Ubuntu update for mysql-8.0
• Slackware Linux update for mariadb
• openEuler update for mysql
• Red Hat Enterprise Linux 9 update for mysql
• Red Hat Enterprise Linux 8 update for the mysql:8.0 module
• Ubuntu update for mariadb
• Anolis OS update for mysql:8.0 module
• Ubuntu update for mariadb
• openEuler 24.03 LTS SP1 update for mariadb
• openEuler 22.03 LTS SP4 update for mariadb
• openEuler 22.03 LTS SP3 update for mariadb
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• SUSE update for mariadb
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Anolis OS update for mysql
• openEuler 24.03 LTS update for mariadb
• Red Hat Enterprise Linux 8 update for the mariadb:10.5 module
• Red Hat Enterprise Linux 9 update for multiple packages
• SUSE update for mariadb
• SUSE update for mariadb
• Anolis OS update for mariadb:10.5 module
• Red Hat Enterprise Linux 10 update for mariadb10.11
• Red Hat Enterprise Linux 9 update for the mariadb:10.11 module