Red Hat Security Advisory: gcc security update

Fixed packages 113

Vulnerabilities 2

• High 7.7
  CVE-2026-95619

  Gcc: libstdc++ integer overflow in `new` operator

  A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application in…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 22, 2026
• High 7.0
  CVE-2026-102010

  Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

  A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 28, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2478395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2537811
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99032.json
• report
  https://access.redhat.com/security/cve/CVE-2026-95619
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-95619
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-95619
• report
  https://access.redhat.com/security/cve/CVE-2026-102010
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-102010
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-102010