Linuxsecurity SUSE Releases UAF Patch for GCC 13 and 48 Vulnerabilities
Article Content
- •CVE-2026-102010 is a critical UAF vulnerability in GCC affecting multiple SUSE products.
- •The flaw could allow remote code execution if exploited, impacting server security.
- •SUSE has released patches for both GCC 13 and GCC 48, urging immediate updates.
SUSE has released important updates addressing an use-after-free (UAF) vulnerability, CVE-2026-102010, affecting the `libstdc++` library in both GCC 13 and GCC 48. The flaw arises from improper pointer updates when the `erase_if` function is called on a binary heap priority queue. This vulnerability could potentially allow for remote code execution on affected systems. The CVE was published on September 28, 2026, and has a CVSS score of 7.0, indicating high severity. Users of SUSE Linux Enterprise Server 12 SP5 LTSS and SUSE Linux Micro 6.2 are urged to apply the patches immediately. Patch instructions are provided for various SUSE products, ensuring that administrators can quickly remediate the issue. The updates are available via the recommended installation methods or through specific commands for each product. As of now, there are no reports of in the wild.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track SuSE and CVE-2026-102010 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions are affected?
Is this vulnerability being exploited?
What should I do to protect my systems?
Continue Reading
CVE-2026-102010: Use-After-Free Vulnerability in GCC Affects Red Hat Systems A flaw in GCC has been identified, specifically affecting the erase_if function in libstdc++. This vulnerability allows an attacker to exploit a use-after-free condition, potentially leading to Denial of Service (DoS) through application crashes or memory corruption. The flaw impacts applications using the affected… CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…