CVE-2026-40467: Use after free in gawk
Published Jul 13, 2026
·Updated
Last updated 16 July 2026
Other sources
Use After Free vulnerability has been found in "io.c" program file of gawk (dogetlineredir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
— NVD
Affected Software
3 affected components
gawk gawk<=5.4.0
Fossies Gawk<=5.4.0
debian/gawk<=1:5.1.0-1, <=1:5.2.1-2, <=1:5.3.2-1
Event History
Jul 13, 2026
CVE Published
via MITRE·12:07 PM
Data Sourced
via MITRE·12:07 PM
DescriptionWeakness
Data Sourced
via NVD·01:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 22, 2026
Data Sourced
via Ubuntu·08:19 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·08:20 PM
DescriptionAffected Software
Data Sourced
via Launchpad·08:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-40467?
CVE-2026-40467 has a risk rating of 15, indicating a high severity level.
2
How do I fix CVE-2026-40467?
To fix CVE-2026-40467, upgrade gawk to version 5.4.1 or later.
3
Which versions of gawk are affected by CVE-2026-40467?
CVE-2026-40467 affects gawk versions 5.4.0 and below.
4
What type of vulnerability is CVE-2026-40467?
CVE-2026-40467 is classified as a Use After Free vulnerability.
5
What impact does CVE-2026-40467 have on gawk?
CVE-2026-40467 may lead to a crash of the gawk application.