Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 479
Alerts This Week
Warning Icon 1 479

openSUSE gawk Moderate Buffer Overflow Use-After-Free Vuln 2026-21393-1

opensuse
Calendar Grey July 23, 2026
Scroller Opensuse
An openSUSE security update addresses three vulnerabilities in gawk, including key fixes for buffer overflows and memory issues.
openSUSE released a security update for gawk to address three vulnerabilities, including use-after-free and buffer overflow issues, which may lead to crashes or memory exhaustion.

Description

This update for gawk fixes the following issues:

- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash

(bsc#1271351).

- CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permit heap metadata manipulation and host

memory exhaustion (bsc#1271352).

- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash

(bsc#1271354).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1303=1

Topics%20covered

Topics Covered

security advisory moderate buffer overflow gawk OpenSUSE use-after-free

Patch

Package List

- openSUSE Leap 16.0:

gawk-5.3.2-160000.3.1

References

* bsc#1271351

* bsc#1271352

* bsc#1271354

References:

* https://www.suse.com/security/cve/CVE-2026-40467.html

* https://www.suse.com/security/cve/CVE-2026-40468.html

* https://www.suse.com/security/cve/CVE-2026-40553.html

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21393-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow gawk OpenSUSE use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.