Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

According to the versions of the gawk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Integer overflow vulnerability has been found in 'builtin.c' program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below.(CVE-2026-40469)

    Buffer overflow vulnerability has been found in 'extension/readdir.c' program file of gawk (ftype()     routine). This issue could be used to crash the program and potentially to achieve code execution,     although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and     below.(CVE-2026-40553)

    Use After Free vulnerability has been found in 'io.c' program file of gawk (do_getline_redir() routine).
    This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)

    Integer overflow vulnerability has been found in 'builtin.c' program file of gawk. This issue may lead to     memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and     objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)

Tenable has extracted the preceding description block directly from the EulerOS gawk security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This
    issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects
    32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1784303038 advisory.

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784217178 advisory.

  - Use After Free vulnerability has been found in io.c program file of gawk (do_getline_redir() routine).
    This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. (CVE-2026-40467)

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

  - Buffer overflow vulnerability has been found in extension/readdir.c program file of gawk (ftype()     routine). This issue could be used to crash the program and potentially to achieve code execution,     although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
    (CVE-2026-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784217178 advisory.

  - Use After Free vulnerability has been found in io.c program file of gawk (do_getline_redir() routine).
    This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. (CVE-2026-40467)

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

  - Buffer overflow vulnerability has been found in extension/readdir.c program file of gawk (ftype()     routine). This issue could be used to crash the program and potentially to achieve code execution,     although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
    (CVE-2026-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784217991 advisory.

  - Use After Free vulnerability has been found in io.c program file of gawk (do_getline_redir() routine).
    This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. (CVE-2026-40467)

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

  - Buffer overflow vulnerability has been found in extension/readdir.c program file of gawk (ftype()     routine). This issue could be used to crash the program and potentially to achieve code execution,     although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
    (CVE-2026-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gawk package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
364087	EulerOS 2.0 SP15 : gawk (EulerOS-SA-2026-3909)	Nessus	Huawei Local Security Checks	Local	medium
363984	EulerOS 2.0 SP15 : gawk (EulerOS-SA-2026-3975)	Nessus	Huawei Local Security Checks	Local	medium
464759	Echo: gawk: security update to 1:5.2.1-2+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
464759	Echo: gawk: security update to 1:5.2.1-2+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
362240	CentOS Linux 7 [TuxCare] Security Update: gawk (CENTOS7:CLSA-2026:1784303038)	Nessus	CentOS Local Security Checks	Local	medium
359607	AlmaLinux 9.6 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784217178)	Nessus	Alma Linux Local Security Checks	Local	medium
359585	Rocky Linux 9.6 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784217178)	Nessus	Rocky Linux Local Security Checks	Local	medium
353242	AlmaLinux 9.2 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784217991)	Nessus	Alma Linux Local Security Checks	Local	medium
338228	Photon OS 5.0: Gawk PHSA-2026-5.0-91-0933	Nessus	PhotonOS Local Security Checks	Local	medium
333622	Photon OS 5.0: Gawk PHSA-2026-5.0-92-0933	Nessus	PhotonOS Local Security Checks	Local	medium
331103	Photon OS 5.0: Gawk PHSA-2026-5.0-0933	Nessus	PhotonOS Local Security Checks	Local	medium
326562	Linux Distros Unpatched Vulnerability : CVE-2026-40469	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-40469

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium