CVE catalog

CVE-2026-40467

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

[CVE catalog]

Severity
Medium · CVSS 5.1CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangawksid1:5.3.2-1vulnerable
Debiangawkforky1:5.3.2-1vulnerable
Debiangawktrixie1:5.2.1-2vulnerable
Debiangawkbookworm1:5.2.1-2vulnerable
CpegawkNot reportedNot reportedvulnerable
Ubuntugawknoble1:5.2.1-2ubuntu0.1fixed
Susegawklinux micro 6.05.3.0-2.1fixed
Susegawklinux enterprise micro 5.34.2.1-150000.3.6.1fixed
Susegawklinux enterprise micro 5.44.2.1-150000.3.6.1fixed
Susegawklinux enterprise micro 5.54.2.1-150000.3.6.1fixed
Susegawklinux enterprise module for basesystem 15 sp74.2.1-150000.3.6.1fixed
Susegawklinux enterprise server 16.05.3.2-160000.3.1fixed
Susegawklinux enterprise server for sap applications 16.05.3.2-160000.3.1fixed
Opensusegawkleap 16.05.3.2-160000.3.1fixed
Susegawklinux micro 6.25.3.2-160000.3.1fixed
Ubuntugawkpro1:4.2.1+dfsg-1.1build1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1ubuntu0.1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1ubuntu0.1+esm1fixed
Ubuntugawk22.041:5.1.0-1build1vulnerable
Ubuntugawk22.041:5.1.0-1build2vulnerable
Ubuntugawk22.041:5.1.0-1build3vulnerable
Ubuntugawk22.041:5.1.0-1ubuntu0.1vulnerable
Ubuntugawk22.041:5.1.0-1ubuntu0.2fixed
Ubuntugawk24.041:5.2.1-2vulnerable
Ubuntugawk24.041:5.2.1-2build2vulnerable
Ubuntugawk24.041:5.2.1-2build3vulnerable
Ubuntugawk24.041:5.2.1-2ubuntu0.1fixed
Ubuntugawk26.041:5.3.2-1build1vulnerable
Ubuntugawk26.041:5.3.2-1ubuntu1vulnerable
Ubuntugawk26.041:5.3.2-1ubuntu1.1fixed
Ubuntugawkpro1:4.2.1+dfsg-1.1build1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1ubuntu0.1vulnerable
Ubuntugawkpro1:5.0.1+dfsg-1ubuntu0.1+esm1fixed
Ubuntugawk22.041:5.1.0-1build1vulnerable
Ubuntugawk22.041:5.1.0-1build2vulnerable
Ubuntugawk22.041:5.1.0-1build3vulnerable
Ubuntugawk22.041:5.1.0-1ubuntu0.1vulnerable
Ubuntugawk22.041:5.1.0-1ubuntu0.2fixed
Ubuntugawk24.041:5.2.1-2vulnerable
Ubuntugawk24.041:5.2.1-2build2vulnerable
Ubuntugawk24.041:5.2.1-2build3vulnerable
Ubuntugawk24.041:5.2.1-2ubuntu0.1fixed
Ubuntugawk26.041:5.3.2-1build1vulnerable
Ubuntugawk26.041:5.3.2-1ubuntu1vulnerable
Ubuntugawk26.041:5.3.2-1ubuntu1.1fixed
CpegawkNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangawksourcesid(unfixed)not yet assignedNot reported[1142071]
Debiangawksourceforky(unfixed)not yet assignedNot reported[1142071]
Debiangawksourcetrixie(unfixed)not yet assignedNot reported[1142071]
Debiangawksourcebookworm(unfixed)not yet assignedNot reported[1142071]
Ubuntugawkdebnoble1:5.2.1-2ubuntu0.1Not reportedNot reportedNot reported
Susegawkrpmlinux micro 6.05.3.0-2.1Not reportedSUSE-SU-2026:23042-1Not reported
Susegawkrpmlinux enterprise micro 5.34.2.1-150000.3.6.1Not reportedSUSE-SU-2026:3455-1Not reported
Susegawkrpmlinux enterprise micro 5.44.2.1-150000.3.6.1Not reportedSUSE-SU-2026:3455-1Not reported
Susegawkrpmlinux enterprise micro 5.54.2.1-150000.3.6.1Not reportedSUSE-SU-2026:3455-1Not reported
Susegawkrpmlinux enterprise module for basesystem 15 sp74.2.1-150000.3.6.1Not reportedSUSE-SU-2026:3455-1Not reported
Susegawkrpmlinux enterprise server 16.05.3.2-160000.3.1Not reportedSUSE-SU-2026:22831-1Not reported
Susegawkrpmlinux enterprise server for sap applications 16.05.3.2-160000.3.1Not reportedSUSE-SU-2026:22831-1Not reported
Opensusegawkrpmleap 16.05.3.2-160000.3.1Not reportedOPENSUSE-SU-2026:21393-1Not reported
Susegawkrpmlinux micro 6.25.3.2-160000.3.1Not reportedSUSE-SU-2026:22767-1Not reported
Ubuntugawkdebpro1:5.0.1+dfsg-1ubuntu0.1+esm1Not reportedUSN-8588-1Not reported
Ubuntugawkdeb22.041:5.1.0-1ubuntu0.2Not reportedUSN-8588-1Not reported
Ubuntugawkdeb24.041:5.2.1-2ubuntu0.1Not reportedUSN-8588-1Not reported
Ubuntugawkdeb26.041:5.3.2-1ubuntu1.1Not reportedUSN-8588-1Not reported
Ubuntugawkdebpro1:5.0.1+dfsg-1ubuntu0.1+esm1Not reportedUBUNTU-CVE-2026-40467Not reported
Ubuntugawkdeb22.041:5.1.0-1ubuntu0.2Not reportedUBUNTU-CVE-2026-40467Not reported
Ubuntugawkdeb24.041:5.2.1-2ubuntu0.1Not reportedUBUNTU-CVE-2026-40467Not reported
Ubuntugawkdeb26.041:5.3.2-1ubuntu1.1Not reportedUBUNTU-CVE-2026-40467Not reported

[Debian bug #1142071]

Notes

[trixie] gawk: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [gawk]Affected
    Details (2)

    • 1:5.2.1-2 · amd64 · bookworm

      Affected

      nvd · gawk · debian · bookworm; nvd · gawk · debian · 12

    • 1:5.2.1-2 · arm64 · bookworm

      Affected

      nvd · gawk · debian · bookworm; nvd · gawk · debian · 12

[Debian 13 (Trixie)]

  • [gawk]Affected

    Source package: [gawk]

    Details (2)

    • 1:5.2.1-2+b1 · amd64 · trixie

      Affected

      nvd · gawk · debian · 13

    • 1:5.2.1-2+b2 · arm64 · trixie

      Affected

      nvd · gawk · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]