High severity7.5NVD Advisory· Published Jul 13, 2026· Updated Jul 14, 2026
CVE-2026-40467
CVE-2026-40467
Description
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
Affected products
5- osv-coords3 versionspkg:rpm/opensuse/gawk&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/gawkpkg:rpm/almalinux/gawk-all-langpacks
< 5.3.2-160000.3.1+ 2 more
- (no CPE)range: < 5.3.2-160000.3.1
- (no CPE)range: < 5.3.0-6.el10_2.1
- (no CPE)range: < 5.3.0-6.el10_2.1
Patches
Vulnerability mechanics
References
2- cgit.git.savannah.gnu.org/cgit/gawk.git/commit/nvdPatch
- cert.pl/en/posts/2026/07/CVE-2026-40467nvdThird Party Advisory
News mentions
1- Patch Tuesday - July 2026Rapid7 Blog · Jul 14, 2026