ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry() that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing findhashsection() to dereference null and deny service.