CVE-2026-40467

A flaw was found in gawk. A Use After Free vulnerability exists in the do_getline_redir() routine within the io.c program file. This vulnerability can be triggered by an attacker, potentially leading to a system crash and causing a Denial of Service (DoS).

Moderate: A Use After Free vulnerability in gawk's do_getline_redir() routine can lead to a denial of service. This flaw, affecting gawk in Red Hat Hardened Images, requires a local attacker with low privileges to trick a user into interacting with specially crafted input, limiting its immediate impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid processing untrusted or maliciously crafted input with gawk. Exercise caution when executing gawk scripts or commands that process data from unknown or unverified sources.