CVE-2026-102010 Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
An attacker can cause a denial of service via a use-after-free vulnerability in the libstdc++ binary heap erase_if function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-102010?
CVE-2026-102010 is a high-severity use after free vulnerability in Red Hat Enterprise Linux 10, published on 28 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.
Weakness: CWE-825
Which versions are affected by CVE-2026-102010?
Linux distribution packages (40)
gcc-toolset-15-gcc AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-gcc-c++ AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-gcc-gfortran AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-gcc-plugin-annobin AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-gcc-plugin-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libasan-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libatomic-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libgccjit AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libgccjit-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libitm-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-liblsan-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libquadmath-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libstdc++-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libstdc++-docs AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libtsan-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-libubsan-devel AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
gcc-toolset-15-offload-nvptx AlmaLinux:10 | All versions | 15.2.1-7.1.el10_2.alma.1 |
cpp Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-c++ Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-gdb-plugin Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-gfortran Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-offload-amdgcn Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-offload-nvptx Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-plugin-annobin Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc-plugin-devel Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
gcc13 Red Hat:hummingbird:1 | All versions | 0:13.5.0-0.2.hum1 |
gcc13-c++ Red Hat:hummingbird:1 | All versions | 0:13.5.0-0.2.hum1 |
gcc13-gfortran Red Hat:hummingbird:1 | All versions | 0:13.5.0-0.2.hum1 |
gcc13-plugin-annobin Red Hat:hummingbird:1 | All versions | 0:13.5.0-0.2.hum1 |
libasan Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libasan-static Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libatomic Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgcc Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgccjit Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgccjit-devel Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgdiagnostics Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgdiagnostics-devel Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgfortran Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
libgfortran-static Red Hat:hummingbird:1 | All versions | 0:16.2.1-3.hum1 |
How do I fix CVE-2026-102010?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-102010 being exploited?
There is no known exploitation of CVE-2026-102010 in the wild and no public exploit code.
Sources
Also known as ALSA-2026:89891, AZL-107979, BELL-CVE-2026-102010, DEBIAN-CVE-2026-102010, ECHO-e52a-f4c4-7dc8, GHSA-q3jj-75h6-5xmp and 16 more.