USN-7306-1: GNU binutils vulnerabilities
It was discovered that GNU binutils in nm tool is affected by an incorrect access control. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-57360) It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2025-0840)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7306-1?
The severity of USN-7306-1 is medium, indicating a moderate risk of impacting system stability.
How do I fix USN-7306-1?
To fix USN-7306-1, update GNU binutils to versions 2.43.1-4ubuntu1.1, 2.42-4ubuntu2.4, or 2.38-4ubuntu2.7 depending on your Ubuntu version.
What systems are affected by USN-7306-1?
USN-7306-1 affects Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10.
What is the impact of USN-7306-1?
The impact of USN-7306-1 includes potential crashes due to incorrect access control in the nm tool.
Is USN-7306-1 exploitable remotely?
USN-7306-1 is not reported to be exploitable remotely, but it poses a risk of local impacts.