Status: UPDATED | Advisory ID: CVE-2026-13732
| CVE | CVE-2026-13732 |
| CVSS Score / Version | 7.0 (High) / CVSS v3.1 |
| Updated | 2026-10-09 |
| CVSS Vector | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is local; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | see table below |
| Classified as | CWE-787 (Out-of-bounds Write) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | ||
| Red Hat | Red Hat Enterprise Linux 8 | ||
| Red Hat | Red Hat Enterprise Linux 9 | ||
| Red Hat | Red Hat Enterprise Linux 7 | ||
| Red Hat | Red Hat Hardened Images | ||
| Red Hat | Red Hat Enterprise Linux 6 | ||
| Red Hat | Red Hat Cost Management On-Premise 1 |
| Subsystems | OT Supporting Infrastructure |
| Sectors | Multiple |
A flaw was found in GDB's STABS debug format parser. The
read_member_functions() function in gdb/stabsread.c contains a linked
list removal bug in the code that separates destructor and non-destructor
member functions of C++ classes. The bug causes the destructor entries to
remain in the main function list while the list length counter is
decremented, resulting in an out-of-bounds write when the function list
is copied to its final allocated array. An attacker can craft an ELF
binary with malicious .stab and .stabstr sections that triggers this
out-of-bounds write when a user opens the file in GDB and performs any
symbol-inspection operation such as setting a breakpoint. The inferior
process does not need to be executed. Under controlled conditions, this
was demonstrated to achieve execution of arbitrary commands within the
GDB process. (NVD)
Monitor Red Hat's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-13732 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-13732 |