Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gawkUpgrade gawk-all-langpacks | Oct 11, 2026 | Sep 29, 2026 |
| Amazon_linux_2023 | — | Upgrade gawk-debugsourceUpgrade gawk-develUpgrade gawk-all-langpacksUpgrade gawk-debuginfoUpgrade gawk-docUpgrade gawk | Aug 10, 2026 | Jul 13, 2026 |
| Oracle_linux | — | Upgrade gawk-all-langpacksUpgrade gawk | Oct 22, 2026 | Jul 13, 2026 |
| Redhat_linux | — | Upgrade gawk-debugsourceUpgrade gawk-all-langpacksUpgrade gawk-debuginfoUpgrade gawkNo solution exists | Aug 5, 2026 | Jul 13, 2026 |
| Rocky_linux | — | Upgrade gawk-debuginfoUpgrade gawkUpgrade gawk-debugsourceUpgrade gawk-all-langpacks | Oct 5, 2026 | Sep 30, 2026 |
| Ubuntu | — | Upgrade gawkUpgrade gawk (Ubuntu Pro) | Jul 23, 2026 | Jul 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 21, 2026 | Jul 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub