Low2.8Vendor: MediumRed Hat Linux

Low [CVE-2026-40469] Denial of Service due to integer overflow

This low-severity Red Hat Linux advisory covers CVE-2026-40469 affecting Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat package: gawk.

CVE-2026-40469 Published Jul 13, 2026Updated by vendor Jul 13, 2026

CVE-2026-40469

Affected products & platforms

Red Hat LinuxRed Hat Enterprise Linux

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash.

It affects 32-bit builds of gawk in versions 5.4.0 and below. A flaw was found in gawk.

An integer overflow vulnerability exists in the `do_sub()` routine, which could allow an attacker to overwrite internal program data. This can lead to a denial of service (DoS) by causing the gawk program to crash.

Red Hat severity: Moderate — CVSS 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-190.

Affected Red Hat products: Red Hat Hardened Images; Red Hat Enterprise Linux 6. Red Hat lists Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4 as not affected.

Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat fixing advisory: RHSA-2026:40041, RHSA-2026:49661.

Affected products named by the advisory: Red Hat package: gawk.

Affected versions

5.4.0

Official advisory · high-confidence parse· fetched 6 days ago·verify at source

Fixed versions

gawk-main-5.4.0-3.1.hum1
gawk-main-5.4.1-1.hum1
RHSA-2026:40041
RHSA-2026:49661

Official advisory · high-confidence parse· fetched 6 days ago·verify at source

Mitigation

Upgrade to a fixed release: gawk-main-5.4.0-3.1.hum1, gawk-main-5.4.1-1.hum1, RHSA-2026:40041, RHSA-2026:49661. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 6 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.