CVE-2026-90801: GNU Binutils ld cache.c cache_bwrite buffer overflow
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using GNU Binutils 2.47 are affected, specifically the ld component. Exploitation requires local access and low-level privileges.
What does an attacker need to exploit it?
An attacker needs to locally manipulate the nbytes argument passed to cache_bwrite in bfd/cache.c. No user interaction is required.
Is public exploit code available?
Yes. The available information states that an exploit has been publicly released and may be used in attacks.
What should teams do if a fix is not available?
No vendor response or fix is described. Restrict local access and limit access to affected ld tooling to trusted users while monitoring for an upstream response.