CVE-2026-102010: Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-28 · updated 2026-11-01
Weakness: CWE-825

Description

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

Affected products

Red Hat OpenShift Container Platform 4.18: all versions
Red Hat Enterprise Linux 10: all versions — fixed in 0:15.2.1-7.1.el10_2
Red Hat Enterprise Linux 6: all versions
Red Hat Enterprise Linux 7: all versions
Red Hat Enterprise Linux 8: all versions — fixed in 0:8.5.0-30.el8_10
Red Hat Enterprise Linux 9: all versions
Red Hat Hardened Images: all versions — fixed in 13.5.0-0.2.hum1
Red Hat OpenShift Container Platform 5: all versions

How to fix

Upgrade to a fixed version: Red Hat Enterprise Linux 10 0:15.2.1-7.1.el10_2; Red Hat Enterprise Linux 8 0:8.5.0-30.el8_10; Red Hat Hardened Images 13.5.0-0.2.hum1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-102010 or the next vulnerability affects your stack