RLSA-2026:98526 — Moderate: gcc-toolset-15-gcc security update

Summary

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.

Security Fix(es):

* gcc: Integer wrap in `std (CVE-2026-114691)

* gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)

* gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)

* gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 102

Release	Package	Fixed in
Rocky Linux · 9	gcc-toolset-15-gcc	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-c++-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-gfortran-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-annobin-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-gcc-plugin-devel-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libasan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libasan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libasan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libasan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libasan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libatomic-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libatomic-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libatomic-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libatomic-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libatomic-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libgccjit-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libitm-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libitm-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libitm-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libitm-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libitm-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-liblsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-liblsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-liblsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-liblsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libquadmath-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libquadmath-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libquadmath-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-docs	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-docs	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-docs	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libstdc++-docs	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libtsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libtsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libtsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libtsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libubsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libubsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libubsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libubsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-libubsan-devel	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-offload-nvptx	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-offload-nvptx	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-offload-nvptx-debuginfo	0:15.2.1-7.4.el9_9
Rocky Linux · 9	gcc-toolset-15-offload-nvptx-debuginfo	0:15.2.1-7.4.el9_9

Vulnerabilities 4

Medium 6.5

CVE-2026-115455

Gcc: stack overflow in std::bitset on libstdc++

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Medium 6.2

CVE-2026-114690

Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compil…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Medium 5.9

CVE-2026-114691

Gcc: integer wrap in `std

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the conta…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Low 3.7

CVE-2026-115456

Gcc: out-of-bounds read in std::from_chars

A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, poten…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2478508
report
https://bugzilla.redhat.com/show_bug.cgi?id=2478652
report
https://bugzilla.redhat.com/show_bug.cgi?id=2562933
report
https://bugzilla.redhat.com/show_bug.cgi?id=2563044
advisory
https://access.redhat.com/errata/RHSA-2026:98526

Moderate: gcc-toolset-15-gcc security update

Summary

Fixed packages 102

Vulnerabilities 4

Gcc: stack overflow in std::bitset on libstdc++

Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std

Gcc: integer wrap in `std

Gcc: out-of-bounds read in std::from_chars

References