CVE-2026-121995
Public on 2026-11-05
Modified on 2026-11-11
Description
A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffer.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | crash | Pending Fix | ||
| Amazon Linux 2023 | crash | Pending Fix | ||
| Amazon Linux 2027 Preview | crash | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-12-5 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-12-6 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-12-8 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-12-9 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-13-0 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-13-1 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-13-2 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-13-3 | Pending Fix | ||
| Amazon Linux 2023 | cuda-gdb-13-4 | Pending Fix | ||
| Amazon Linux 2 - Core | gdb | Pending Fix | ||
| Amazon Linux 2023 | gdb | Pending Fix | ||
| Amazon Linux 2027 Preview | gdb | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |