This vulnerability involves an integer divide-by-zero error in the Pbuild_file_symtab() function of the dtrace process on Oracle Linux (versions 8, 9, and 10). An unprivileged local attacker can reliably trigger a crash of the dtrace process by providing a specially crafted ELF binary. The issue leads to a denial-of-service condition by crashing the process but does not affect data confidentiality or integrity. The CVSS v3.1 base score is 3.3, reflecting low impact and requiring local access with low attack complexity.

The impact is limited to availability, causing a denial-of-service by crashing the dtrace process. There is no impact on confidentiality or integrity. Exploitation requires local privileges and does not involve user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict unprivileged users' ability to execute or interact with dtrace and monitor for abnormal process crashes. Avoid running dtrace with untrusted ELF binaries. Follow Oracle's official advisories for updates.