Wind River Support Network

HomeDefectsLIN1025-18194

Acknowledged

LIN1025-18194 : Security Advisory - gawk - CVE-2026-40469

Created: Aug 12, 2026 Updated: Sep 16, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.