RHSA-2026:99594: Important: gdb security update
Important: gdb security update
Other sources
The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): gdb: gdb: Out-of-bounds write in STABS parser readmemberfunctions() via crafted ELF (CVE-2026-13732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gdbto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4 - Upgrade
Upgrade
redhat/gdb-debuginfoto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4 - Upgrade
Upgrade
redhat/gdb-debugsourceto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4 - Upgrade
Upgrade
redhat/gdb-docto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4 - Upgrade
Upgrade
redhat/gdb-gdbserverto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4 - Upgrade
Upgrade
redhat/gdb-headlessto a version that resolves this vulnerability.Fixed in 8.2-15.1.el8_4
Event History
Frequently Asked Questions
What attacker-controlled input is involved in exploitation?
Exploitation involves a crafted ELF file that triggers an out-of-bounds write in GDB's STABS parser, specifically in read_member_functions().
Which GDB package variants are included in this update?
The listed software includes gdb, gdb-debuginfo, gdb-debugsource, gdb-headless, gdb-doc, and gdb-gdbserver.
Which Red Hat product channels are listed as affected?
The advisory lists Red Hat Enterprise Linux for x86_64 Extended Life Cycle Long Life and Red Hat Enterprise Linux Server AUS.