Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 4

Vulnerabilities 7

• High 7.8
  CVE-2026-6846

  Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

  A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Apr 22, 2026
• Medium 6.1
  CVE-2026-3441

  Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

  A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Mar 15, 2026
• Medium 6.1
  CVE-2026-3442

  Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

  A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF obje…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Mar 15, 2026
• Medium 6.1
  CVE-2026-4647

  Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

  A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly vali…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Mar 23, 2026
• Medium 5.3
  CVE-2025-11082

  GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

  A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. Th…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Sep 27, 2025
• Medium 5.3
  CVE-2025-11083

  GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

  A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Sep 27, 2025
• Medium 5.0
  CVE-2026-6845

  Binutils: binutils: denial of service via crafted elf file

  A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploi…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Apr 22, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2025-11082
• report
  https://access.redhat.com/security/cve/CVE-2025-11083
• report
  https://access.redhat.com/security/cve/CVE-2026-3441
• report
  https://access.redhat.com/security/cve/CVE-2026-3442
• report
  https://access.redhat.com/security/cve/CVE-2026-4647
• report
  https://access.redhat.com/security/cve/CVE-2026-6845
• report
  https://access.redhat.com/security/cve/CVE-2026-6846
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39022.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2399943
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-11082
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-11082
• article
  https://sourceware.org/bugzilla/attachment.cgi?id=16358
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33464
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2
• article
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8
• article
  https://vuldb.com/?ctiid.326123
• article
  https://vuldb.com/?id.326123
• article
  https://vuldb.com/?submit.661276
• article
  https://www.gnu.org/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2399948
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-11083
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-11083
• article
  https://sourceware.org/bugzilla/attachment.cgi?id=16353
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33457
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1
• article
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490
• article
  https://vuldb.com/?ctiid.326124
• article
  https://vuldb.com/?id.326124
• article
  https://vuldb.com/?submit.661277
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2443826
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3441
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3441
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2443828
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3442
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3442
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2450302
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-4647