CVE-2026-91780: GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
A weakness has been identified in GNU Binutils 2.47. This impacts the function elflinkaddobjectsymbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Is this exposed to remote, unauthenticated attackers?
The supplied vector identifies this as a local attack. It also requires low privileges; no user interaction is required.
What is the expected security impact if exploitation succeeds?
The reported impact is limited to availability through a null pointer dereference. The provided metrics indicate no confidentiality or integrity impact.
Does exploit availability affect prioritization?
Yes. Public exploit availability is reported, which makes local exploitation more practical where low-privileged access to the affected system is possible.