GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
cve-program · CVE-2026-90828
PublishedA security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-90828 · CVE overview and exploitation status
cve-program · CVE-2026-90828
Related changes
Linked by CVE identifierNo related changes are available here.