CVE-2026-90828GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference

Beschreibung

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-403330 | GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-403330 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• CVE-2026-90828 | CVE Analysis and Report third-party-advisoryThird Party AdvisoryVDB Entry
• Submit #925227 | GNU Binutils 2.47 Memory Corruption third-party-advisoryThird Party AdvisoryVDB Entry
• https://sourceware.org/bugzilla/show_bug.cgi?id=34450 issue-trackingExploitIssue TrackingThird Party Advisory
• https://sourceware.org/bugzilla/attachment.cgi?id=16882 exploitIssue Tracking
• https://www.gnu.org/ broken-linkproductProduct