PT-2026-57812 · Gawk+1 · Gawk+1

·

CVE-2026-40467

·

Published

2026-07-13

·

Updated

2026-08-03

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier
Description A Use After Free issue exists in the io.c file within the do getline redir() function. This flaw can result in a program crash. Use After Free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.
Recommendations Update gawk to a version later than 5.4.0.

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-92292
CVE-2026-40467
ECHO-D087-E069-12CE
JLSEC-2026-785
JLSEC-2026-786
JLSEC-2026-787
JLSEC-2026-788
OESA-2026-3160
OESA-2026-3161
OESA-2026-3162
OESA-2026-3163
OESA-2026-3164
OPENSUSE-SU-2026:21393-1
RHSA-2026:40041
RHSA-2026:49661
SUSE-SU-2026:22767-1
SUSE-SU-2026:22831-1
SUSE-SU-2026:23042-1
SUSE-SU-2026:3455-1
USN-8588-1

Affected Products

Ubuntu
Gawk