What is RHSA-2026:89891?

RHSA-2026:89891 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: gcc-toolset-15-gcc security update

Which CVE IDs does RHSA-2026:89891 cover?

RHSA-2026:89891 covers the following CVE IDs: CVE-2026-102010. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:89891?

RHSA-2026:89891 has a CVSS v3 base score of 7.0, published by Red Hat Product Security.

Which products are affected by RHSA-2026:89891?

RHSA-2026:89891 affects 92 products, including: Red Hat Enterprise Linux AppStream (v. 10); gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10); and others — see the full list on the advisory page.

RHSA-2026:89891MediumCVSS 7.0

Red Hat Security Advisory: gcc-toolset-15-gcc security update

Vendor

Red Hat Product Security

Published

October 27, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-102010 →

📋 Description

CVE-2026-102010 — gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if

🎯 Affected products92

Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-debuginfo-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-debuginfo-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-debuginfo-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-c++-debuginfo-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-debuginfo-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-debuginfo-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-debuginfo-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-debuginfo-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-debuginfo-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-debuginfo-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-debuginfo-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-gfortran-debuginfo-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-plugin-annobin-0:15.2.1-7.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-plugin-annobin-0:15.2.1-7.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-plugin-annobin-0:15.2.1-7.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
gcc-toolset-15-gcc-plugin-annobin-0:15.2.1-7.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
+62 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products92

✅ Remediation

🔗 References (4)