A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
References
| Link | Resource |
|---|---|
| https://sourceware.org/bugzilla/attachment.cgi?id=16882 | Issue Tracking |
| https://sourceware.org/bugzilla/show_bug.cgi?id=34450 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/cve/CVE-2026-90828 | Third Party Advisory VDB Entry |
| https://vuldb.com/submit/925227 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/403330 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/403330/cti | Permissions Required VDB Entry |
| https://www.gnu.org/ | Product |
Configurations
History
21 Sep 2026, 17:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | |
| First Time |
Gnu
Gnu binutils |
|
| References | () https://sourceware.org/bugzilla/attachment.cgi?id=16882 - Issue Tracking | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=34450 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/cve/CVE-2026-90828 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/submit/925227 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/403330 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/403330/cti - Permissions Required, VDB Entry | |
| References | () https://www.gnu.org/ - Product |
Information
Published : 2026-09-14 22:16
Updated : 2026-09-21 17:49
NVD link : CVE-2026-90828
Mitre link : CVE-2026-90828
CVE.ORG link : CVE-2026-90828
JSON object : View
Products Affected
gnu
- binutils