Vulnerability in Red Hat Hardened Images

[ Description ]Official description

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Sep 2026WID-SEC-2026-3612

  gcc: Vulnerability allows file manipulation and denial of service Translated from German

  CVE-2026-102010

[ References ]References

• access.redhat.com/errata/RHSA-2026:73642
• access.redhat.com/errata/RHSA-2026:74569
• access.redhat.com/security/cve/CVE-2026-102010
• bugzilla.redhat.com/show_bug.cgi