A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.

The remote host is affected by the vulnerability described in GLSA-202604-04 (DTrace: Arbitrary file creation via dtprobed)

    A vulnerability has been found in dtprobed that allows for arbitrary file creation through specially     crafted USDT provider names.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50151 advisory.

    [2.0.6-1]
    - Fix dtprobed unsafe probe description handling (CVE-2026-21991).
      [Orabug: 39054018]

      Credit Statement:
      The following people or organizations reported security vulnerabilities addressed by this ELSA to     Oracle:
        Dhiraj Mishra: CVE-2026-21991

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50152 advisory.

    [2.0.6-1]
    - Fix dtprobed unsafe probe description handling (CVE-2026-21991).
      [Orabug: 39054018]

      Credit Statement       The following people or organizations reported security vulnerabilities addressed by this ELSA to     Oracle:
        Dhiraj Mishra: CVE-2026-21991

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50153 advisory.

    [2.0.6-1]
    - Fix dtprobed unsafe probe description handling (CVE-2026-21991).
      [Orabug: 39054018]

      Credit Statement:
      The following people or organizations reported security vulnerabilities addressed by this ELSA to     Oracle:
        Dhiraj Mishra: CVE-2026-21991

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
307393	GLSA-202604-04 : DTrace: Arbitrary file creation via dtprobed	Nessus	Gentoo Local Security Checks	medium
302243	Oracle Linux 8 : dtrace (ELSA-2026-50151)	Nessus	Oracle Linux Local Security Checks	medium
302228	Oracle Linux 8 / 9 : dtrace (ELSA-2026-50152)	Nessus	Oracle Linux Local Security Checks	medium
302227	Oracle Linux 10 / 9 : dtrace (ELSA-2026-50153)	Nessus	Oracle Linux Local Security Checks	medium

Detections

Analytics

CVE-2026-21991

medium

Tenable Plugins

medium

medium

medium

medium