Skip to content
OpenAdvisories
Medium ELSA-2026-73511 2 CVEs

Moderate: gawk security update (Oracle Linux 8)

Published Sep 30, 2026 · Updated Sep 30, 2026

Ecosystem: Oracle Linux

Summary

[4.2.1-5]
- Fix use-after-free in do_getline_redir() (CVE-2026-40467)
Resolves: RHEL-222601

[4.2.1-4.1]
- Fix integer overflow in do_sub() and parse_escape() (CVE-2026-40468)
Resolves: RHEL-222771

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 gawk 0:4.2.1-5.el8_10

Vulnerabilities 2

  • Medium 5.1
    CVE-2026-40467

    Use after free in gawk

    Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

    GNU gawk gawk gawk Debian Ubuntu Azure Linux
  • Low 2.1
    CVE-2026-40468

    Heap buffer overflow in gawk

    Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affect…

    GNU gawk gawk gawk Debian Ubuntu Azure Linux