Fedora Account System
Red Hat Associate
Red Hat Customer
An integer overflow triggered when processing inputs to the C++ `new` operator in libstdc+-v3/libsupc+/new_opa.cc where sz + align could overflow with large sz or align, potentially resulting in an undersized allocation instead of throwing bad_alloc. Note that this only affects older gcc versions since 12.4 onwards (see pr113258) prefer posix_memalign over aligned_alloc so on the RHEL front this should only affect RHEL9 and RHEL8 system gcc. The older libstdc++ (8.5.0) has a slightly different variant of that expression but has the same overflow problem.
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:89830 https://access.redhat.com/errata/RHSA-2026:89830
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:98475 https://access.redhat.com/errata/RHSA-2026:98475
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.8 Extended Update Support Via RHSA-2026:99032 https://access.redhat.com/errata/RHSA-2026:99032