Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Rocky gcc-toolset-15-gcc may cause crashes

published 6 days ago

Summary

The gcc-toolset-15-gcc compiler package on Rocky Linux can trigger a crash that stops programs from running. This happens because the compiler mishandles memory when removing items from a binary heap, leading to a denial of service condition. Update the package to the latest version to prevent the issue.

What to do

Update rocky gcc-toolset-15-gcc to version 0:15.2.1-7.1.el10_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Rocky Linux:10	rocky	gcc-toolset-15-gcc	< 0:15.2.1-7.1.el10_2 Fix: upgrade to 0:15.2.1-7.1.el10_2

Original advisory text

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.

Security Fix(es):

* gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

https://errata.rockylinux.org/RLSA-2026:89891 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2478395 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:89891 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.0 High

Timeline

Published29 Oct 2026

Updated29 Oct 2026

First seen29 Oct 2026

Sources

RLSA-2026:89891 · OSV

Track software like this

Free during beta