CVE-2026-123151

Public on 2026-11-05
Modified on 2026-11-10
Description
A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
8.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core crash Not Affected
Amazon Linux 2023 crash Not Affected
Amazon Linux 2027 Preview crash Not Affected
Amazon Linux 2023 cuda-gdb-12-5 Pending Fix
Amazon Linux 2023 cuda-gdb-12-6 Pending Fix
Amazon Linux 2023 cuda-gdb-12-8 Pending Fix
Amazon Linux 2023 cuda-gdb-12-9 Pending Fix
Amazon Linux 2023 cuda-gdb-13-0 Pending Fix
Amazon Linux 2023 cuda-gdb-13-1 Pending Fix
Amazon Linux 2023 cuda-gdb-13-2 Pending Fix
Amazon Linux 2023 cuda-gdb-13-3 Pending Fix
Amazon Linux 2023 cuda-gdb-13-4 Pending Fix
Amazon Linux 2023 cuda-gdb-src-12-5 Pending Fix
Amazon Linux 2023 cuda-gdb-src-12-6 Pending Fix
Amazon Linux 2023 cuda-gdb-src-12-8 Pending Fix
Amazon Linux 2023 cuda-gdb-src-12-9 Pending Fix
Amazon Linux 2023 cuda-gdb-src-13-0 Pending Fix
Amazon Linux 2023 cuda-gdb-src-13-1 Pending Fix
Amazon Linux 2023 cuda-gdb-src-13-2 Pending Fix
Amazon Linux 2023 cuda-gdb-src-13-3 Pending Fix
Amazon Linux 2023 cuda-gdb-src-13-4 Pending Fix
Amazon Linux 2 - Core gdb Pending Fix
Amazon Linux 2023 gdb Pending Fix
Amazon Linux 2027 Preview gdb Pending Fix
Amazon Linux 2 - Core gdbm Not Affected
Amazon Linux 2023 gdbm Not Affected
Amazon Linux 2027 Preview gdbm Not Affected
Amazon Linux 2 - Core less Not Affected
Amazon Linux 2023 less Not Affected
Amazon Linux 2027 Preview less Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H