RHSA-2026:99596: Important: gdb security update
The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): gdb: gdb: Out-of-bounds write in STABS parser readmemberfunctions() via crafted ELF (CVE-2026-13732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gdbto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8 - Upgrade
Upgrade
redhat/gdb-debuginfoto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8 - Upgrade
Upgrade
redhat/gdb-debugsourceto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8 - Upgrade
Upgrade
redhat/gdb-docto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8 - Upgrade
Upgrade
redhat/gdb-gdbserverto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8 - Upgrade
Upgrade
redhat/gdb-headlessto a version that resolves this vulnerability.Fixed in 8.2-19.1.el8_8
Event History
Frequently Asked Questions
What does an attacker need to provide to trigger the flaw?
The issue is triggered through a crafted ELF file containing data processed by GDB's STABS parser, specifically read_member_functions().
Which Red Hat GDB components are included in this security update?
The update covers redhat/gdb, redhat/gdb-debuginfo, redhat/gdb-debugsource, redhat/gdb-headless, redhat/gdb-gdbserver, and redhat/gdb-doc.