Description
https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: `nm --without-symbol-version` function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | binutils | 2.43.50.20241221-1 | — |
| Debian 13 | binutils | 2.43.50.20241221-1 | — |
| Debian 12 | binutils | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | binutils | 2.42-4ubuntu2.4 | USN-7306-1 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.7 | USN-7306-1 |
| Ubuntu 20.04 LTS | binutils | 2.34-6ubuntu1.10 | USN-7306-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | binutils +2 | 2.39-6.amzn2023.0.11 | ALAS2023-2025-874 |
Advisories 3
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
- USN-7306-1 binutils vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- ALAS2023-2025-874 Moderate: binutils security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 5, 2025