CVE-2026-13732: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10

The vulnerability exists in GDB's STABS debug format parser, specifically in the read_member_functions() function in gdb/stabsread.c. The bug is a linked list removal error that causes destructor entries to remain in the main function list while the list length counter is decremented, leading to an out-of-bounds write when copying the function list to its final allocated array. An attacker can exploit this by crafting an ELF binary with malicious .stab and .stabstr sections. Opening this binary in GDB and performing any symbol-inspection operation (e.g., setting a breakpoint) triggers the out-of-bounds write. This flaw allows execution of arbitrary commands within the GDB process under controlled conditions. The vulnerability affects Red Hat Enterprise Linux 8 versions, and Red Hat has issued an important security advisory with updated GDB packages to fix the issue.

Successful exploitation can lead to arbitrary command execution within the GDB process. This can compromise the security of the system running GDB, potentially allowing an attacker to execute code with the privileges of the user running GDB. The vulnerability requires a user to open a crafted ELF binary in GDB and perform symbol inspection, but does not require execution of the inferior process. The CVSS 3.1 score is 7.0 (High), reflecting the local attack vector, high complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Red Hat has released security updates for GDB in Red Hat Enterprise Linux 8 to address this vulnerability. Users should apply the updated GDB packages as described in Red Hat advisory RHSA-2026:73425. The vendor advisory provides detailed instructions for applying the update. No other mitigations are specifically recommended by the vendor. Patch status is confirmed as an official fix available via the Red Hat update channels.