RLSA-2026:98648 — Moderate: gcc security update

Summary

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

* gcc: Integer wrap in `std (CVE-2026-114691)

* gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)

* gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)

* gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 188

Release	Package	Fixed in
Rocky Linux · 10	cpp	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	cpp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-c++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debugsource	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debugsource	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debugsource	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-debugsource	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-gfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-amdgcn	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-amdgcn-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-nvptx	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-nvptx	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-nvptx-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-offload-nvptx-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-annobin-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	gcc-plugin-devel-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libatomic-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgcc-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libgccjit-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libgfortran-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-amdgcn	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-amdgcn-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-nvptx	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-nvptx	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-nvptx-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libgomp-offload-nvptx-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libhwasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libhwasan	0:14.4.1-5.el10_3
Rocky Linux · 10	libhwasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libhwasan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libitm-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	liblsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libquadmath-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-devel	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-docs	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-docs	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-docs	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-docs	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libstdc++-static	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libtsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan-debuginfo	0:14.4.1-5.el10_3
Rocky Linux · 10	libubsan-debuginfo	0:14.4.1-5.el10_3

Vulnerabilities 4

Medium 6.5

CVE-2026-115455

Gcc: stack overflow in std::bitset on libstdc++

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Medium 6.2

CVE-2026-114690

Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compil…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Medium 5.9

CVE-2026-114691

Gcc: integer wrap in `std

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the conta…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026
Low 3.7

CVE-2026-115456

Gcc: out-of-bounds read in std::from_chars

A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, poten…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 30, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2478652
report
https://bugzilla.redhat.com/show_bug.cgi?id=2478508
report
https://bugzilla.redhat.com/show_bug.cgi?id=2562933
report
https://bugzilla.redhat.com/show_bug.cgi?id=2563044
advisory
https://access.redhat.com/errata/RHSA-2026:98648

Moderate: gcc security update

Summary

Fixed packages 188

Vulnerabilities 4

Gcc: stack overflow in std::bitset on libstdc++

Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std

Gcc: integer wrap in `std

Gcc: out-of-bounds read in std::from_chars

References