Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-90828

Опубликовано: 14 сент. 2026
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

A flaw was found in GNU Binutils. A local attacker, by performing a manipulation, can cause a null pointer dereference in the elf_orphan_compatible function. This could lead to a denial of service or other unpredictable behavior.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Hardened ImagesbinutilsAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2533528binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function

EPSS

Процентиль: 5%
0.00152
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
nvd
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnera ...

CVSS3: 5.3
github
2 дня назад

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

EPSS

Процентиль: 5%
0.00152
Низкий

5.3 Medium

CVSS3