PT-2026-57812

CVE-2026-40467

·

Published

2026-07-13

·

Updated

2026-09-29

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier
Description A Use After Free issue exists in the io.c file within the do getline redir() function. This flaw can result in a program crash. Use After Free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.
Recommendations Update gawk to a version later than 5.4.0.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2026-40467
ALSA-2026:73429
ALSA-2026:73511
ALSA-2026:73512
AZL-92292
CLSA-2026-1784217178
CLSA-2026-1784217991
ECHO-D087-E069-12CE
JLSEC-2026-785
JLSEC-2026-786
JLSEC-2026-787
JLSEC-2026-788
OESA-2026-3160
OESA-2026-3161
OESA-2026-3162
OESA-2026-3163
OESA-2026-3164
OPENSUSE-SU-2026:21393-1
RHSA-2026:40041
RHSA-2026:49661
RHSA-2026:73429
RHSA-2026:73511
RHSA-2026:73512
SUSE-SU-2026:22767-1
SUSE-SU-2026:22831-1
SUSE-SU-2026:23042-1
SUSE-SU-2026:3455-1
USN-8588-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com