Summary
It was discovered that Gawk incorrectly handled memory when processing
input using the getline redirection. An attacker could possibly use
this issue to cause a denial of service. (CVE-2026-40467)
It was discovered that Gawk incorrectly handled certain integer
calculations when allocating memory. An attacker could possibly use
this issue to cause a denial of service or overwrite heap memory with
attacker-controlled data. (CVE-2026-40468)
It was discovered that Gawk incorrectly handled certain integer
calculations when performing substitutions. An attacker could possibly
use this issue to cause a denial of service. (CVE-2026-40469)
It was discovered that Gawk incorrectly handled memory when reading
directory entries. An attacker could possibly use this issue to cause
a denial of service or execute arbitrary code. This issue only affected
Ubuntu 26.04 LTS. (CVE-2026-40553)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gawk | 1:5.1.0-1ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | gawk | 1:5.2.1-2ubuntu0.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | gawk | 1:5.3.2-1ubuntu1.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | gawk | 1:4.0.1+dfsg-2.1ubuntu2+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gawk | 1:4.1.3+dfsg-0.1ubuntu0.1~esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gawk | 1:4.1.4+dfsg-1ubuntu0.1~esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gawk | 1:5.0.1+dfsg-1ubuntu0.1+esm1 |
Vulnerabilities 4
-
Medium 5.1
Use after free in gawk
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
-
Medium 5.1
Heap buffer overflow in gawk
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and bel…
-
Medium 5.1
Stack-based buffer overflow in gawk
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. I…
-
Low 2.1
Heap buffer overflow in gawk
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affect…