A critical out-of-bounds write vulnerability in the GDB debugger allows an attacker to execute arbitrary commands on a system when a user opens a malicious file.

The flaw resides in the read_member_functions() function within gdb/stabsread.c, where a linked list removal error leads to an out-of-bounds write. An unauthenticated attacker can trigger this by providing a specially crafted ELF binary that a local user subsequently opens for symbol inspection.

Successful exploitation allows an attacker to achieve arbitrary code execution within the context of the GDB process. Given the CVSS score of 7.8, this represents a high-severity risk, as it could lead to full compromise of the user account and subsequent lateral movement or data exfiltration from the host system.

Immediate Action: Monitor official Red Hat security advisories and apply the relevant GDB package updates as soon as they are released for your specific distribution.

Proactive Monitoring: Review system logs for unusual GDB activity and implement strict controls over the execution of untrusted binary files or debug symbols.

Compensating Controls: Utilize file integrity monitoring and endpoint protection software to detect or block the execution of unrecognized or suspicious ELF binaries.

Public Exploit Available: Unknown

This vulnerability presents a serious risk to development and system administration environments where GDB is frequently utilized. Organizations should prioritize updating their GDB installations once patches are available and advise personnel to exercise caution when opening or debugging untrusted binary files.