A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Weakness
The product does not release or incorrectly releases a resource before it is made available for re-use.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Binutils | Gnu | 2.47 (including) | 2.47 (including) |
| Red Hat Hardened Images | RedHat | binutils-main-2.46.1-1.1.hum1 | * |
Potential Mitigations
- Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
- For example, languages such as Java, Ruby, and Lisp perform automatic garbage collection that releases memory for objects that have been deallocated.
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/125.html
- https://cwe.mitre.org/data/definitions/130.html
- https://cwe.mitre.org/data/definitions/131.html
- https://cwe.mitre.org/data/definitions/494.html
- https://cwe.mitre.org/data/definitions/495.html
- https://cwe.mitre.org/data/definitions/496.html
- https://cwe.mitre.org/data/definitions/666.html
References
- https://sourceware.org/bugzilla/attachment.cgi?id=16883
- https://sourceware.org/bugzilla/show_bug.cgi?id=34451
- https://vuldb.com/cve/CVE-2026-90829
- https://vuldb.com/submit/925228
- https://vuldb.com/vuln/403331
- https://vuldb.com/vuln/403331/cti
- https://www.gnu.org/
- https://sourceware.org/bugzilla/show_bug.cgi?id=34451