Log in Start free

Vulnerability · Published Mar 17, 2026 · Assigned by ibm

CVE-2026-3856IBM Db2 Recovery Expert Missing Integrity Check

Medium 5.3

In plain English

A medium-severity security flaw in Db2 Recovery Expert from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 94.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-3856
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-3856
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-3856
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-3856

Affected products (as reported)

VendorProductVersions
IBM Db2 Recovery Expert 5.5 IF 2

Weakness: CWE-353 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References