CVE-2026-13732: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10

The vulnerability exists in GDB's STABS debug format parser, specifically in the read_member_functions() function in gdb/stabsread.c. The bug involves improper linked list manipulation that causes destructor entries to remain in the main function list while the list length counter is decremented, leading to an out-of-bounds write during copying to the final allocated array. Exploitation requires a crafted ELF binary with malicious .stab and .stabstr sections. When a user opens this file in GDB and performs symbol inspection (e.g., setting a breakpoint), the out-of-bounds write occurs. This flaw can lead to execution of arbitrary commands within the GDB process without needing to execute the inferior process. Red Hat has issued an important security advisory with updated GDB packages to fix this issue in Red Hat Enterprise Linux 8.

Successful exploitation allows an attacker to execute arbitrary commands within the GDB process by triggering an out-of-bounds write. This can compromise the integrity and confidentiality of the debugging environment. The vulnerability requires local access to open a crafted ELF binary in GDB and perform symbol inspection operations. The CVSS v3.1 base score is 7.0, indicating high severity with high impact on confidentiality, integrity, and availability.

Red Hat has released security updates for GDB in Red Hat Enterprise Linux 8 to address this vulnerability. Users should apply the official patches provided in Red Hat Security Advisory RHSA-2026:73425. Details and instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are specified by the vendor. Patch status is confirmed as fixed in the updated packages.