Wind River Support Network

HomeDefectsLIN1025-18193

Acknowledged

LIN1025-18193 : Security Advisory - gawk - CVE-2026-40468

Created: Aug 12, 2026 Updated: Sep 16, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.