CVE-2026-121995 Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-121995?
CVE-2026-121995 is a high-severity vulnerability in Red Hat Enterprise Linux 10, published on 5 Nov 2026.
Official description
A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffer.
Weakness: CWE-121
Which versions are affected by CVE-2026-121995?
How do I fix CVE-2026-121995?
No fix has been published for CVE-2026-121995 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-121995 being exploited?
There is no known exploitation of CVE-2026-121995 in the wild and no public exploit code.
Sources
Also known as AZL-113134, AZL-113155, DEBIAN-CVE-2026-121995, GHSA-gxgg-8p4f-8xhq, UBUNTU-CVE-2026-121995.