UBUNTU-CVE-2026-121996: Ubuntu/gdb vulnerability
Published Nov 6, 2026
·Updated
A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeating ASLR in further exploitation.
Affected Software
7 affected components
ubuntu/gdb*
ubuntu/gdb*
ubuntu/gdb*
ubuntu/gdb*
ubuntu/gdb*
ubuntu/gdb*
ubuntu/gdb*
Event History
Nov 6, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software