Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-14T16:30:18 binutils: GNU Binutils: Denial of service via null pointer dereference in ld component 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H CWE-476

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

A flaw was found in GNU Binutils. A local attacker can exploit a null pointer dereference vulnerability in the `bfd_putl64` function of the `ld` component. This can lead to a denial of service or application instability.

Red Hat Hardened Images 2026-07-28T00:00:00Z RHSA-2026:47171 binutils-main-2.46.1-1.1.hum1 Red Hat Enterprise Linux 10 Under investigation binutils Red Hat Enterprise Linux 10 Under investigation gcc-toolset-15-binutils Red Hat Enterprise Linux 10 Under investigation gcc-toolset-16-binutils Red Hat Enterprise Linux 10 Under investigation gdb Red Hat Enterprise Linux 10 Under investigation mingw-binutils Red Hat Enterprise Linux 6 Under investigation binutils Red Hat Enterprise Linux 7 Under investigation binutils Red Hat Enterprise Linux 7 Under investigation gdb Red Hat Enterprise Linux 8 Under investigation binutils Red Hat Enterprise Linux 8 Under investigation gcc-toolset-14-binutils Red Hat Enterprise Linux 8 Under investigation gcc-toolset-14-gdb Red Hat Enterprise Linux 8 Under investigation gcc-toolset-15-binutils Red Hat Enterprise Linux 8 Under investigation gcc-toolset-15-gdb Red Hat Enterprise Linux 8 Under investigation gdb Red Hat Enterprise Linux 8 Under investigation mingw-binutils Red Hat Enterprise Linux 9 Under investigation binutils Red Hat Enterprise Linux 9 Under investigation gcc-toolset-14-binutils Red Hat Enterprise Linux 9 Under investigation gcc-toolset-15-binutils Red Hat Enterprise Linux 9 Under investigation gcc-toolset-16-binutils Red Hat Enterprise Linux 9 Under investigation gdb Red Hat Enterprise Linux 9 Under investigation mingw-binutils Red Hat OpenShift Container Platform 4 Under investigation openshift/ose-rhel-coreos-8 Red Hat OpenShift Container Platform 4 Under investigation openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-90802 https://nvd.nist.gov/vuln/detail/CVE-2026-90802 https://github.com/r1ck9-2q/cve_summit/blob/main/SEGV%20in%20%60bfd_putl64%60%20(bfdlibbfd.c989)%20during%20relocation%20output%20via%20malformed%20ELF.md https://sourceware.org/bugzilla/show_bug.cgi?id=34443 https://vuldb.com/cve/CVE-2026-90802 https://vuldb.com/submit/920277 https://vuldb.com/vuln/403304 https://vuldb.com/vuln/403304/cti https://www.gnu.org/