Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92292.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-92292
Upstream
  • CVE-2026-40467
Published
2026-07-13T13:16:36Z
Modified
2026-09-14T05:26:59Z
Summary
CVE-2026-40467 affecting package gawk for versions less than 5.2.2-2
Details

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

References

Affected packages

Azure Linux:3 / gawk

Package

Name
gawk
Purl
pkg:rpm/azure-linux/gawk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.2-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92292.json"