Description
A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dump_data_section/print_string_section of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 73db9d2021cab9e23fd734b0a76a612d52a6f1db. It is recommended to apply a patch to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | elfutils | 0.192 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | elfutils | No fix yet | — |
| Debian 13 | elfutils | No fix yet | — |
| Debian 12 | elfutils | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | elfutils | 0.190-1.1ubuntu0.1 | USN-7369-1 |
| Ubuntu 22.04 LTS | elfutils | 0.186-1ubuntu0.1 | USN-7369-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP7 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP6 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP6 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP5 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP5 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP4 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES 15 SP4 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP5 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES for SAP 15 SP5 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES for SAP 15 SP4 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLES for SAP 15 SP4 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE Micro 5.5 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE Micro 5.4 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE Micro 5.3 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE HPC 15 SP5 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE HPC 15 SP5 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE HPC 15 SP4 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SLE HPC 15 SP4 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SUSE Manager Server LTS 4.3 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SUSE Manager Server LTS 4.3 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SUSE Manager Proxy LTS 4.3 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| SUSE Manager Proxy LTS 4.3 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | elfutils | 0.185-150400.5.8.3 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
| openSUSE Leap 15.6 | elfutils-debuginfod | 0.185-150400.5.8.2 | SUSE-SU-2025:4092-1, SUSE-RU-2025:4092-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | elfutils +8 | 0.188-3.amzn2023.0.3 | ALAS2023-2025-969 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | elfutils | 0.189-4 | — |
Advisories 6
- WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- USN-7369-1 elfutils vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- SUSE-SU-2025:4092-1 Security update for elfutils SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-RU-2025:4092-1 Security update for elfutils SUSE / openSUSE Security Updates · Mar 23, 2026
- ALAS2023-2025-969 Moderate: elfutils security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · May 13, 2025
References
- VDB-295981 | GNU elfutils eu-readelf readelf.c print_string_section buffer overflow vdb-entry technical-description
- VDB-295981 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #496485 | GNU elfutils/eu-readelf 0.192 buffer over read third-party-advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=32656 issue-tracking
- https://sourceware.org/bugzilla/show_bug.cgi?id=32657 issue-tracking
- https://sourceware.org/bugzilla/attachment.cgi?id=15927 exploit
- https://sourceware.org/bugzilla/show_bug.cgi?id=32656#c3 issue-tracking patch
- https://www.gnu.org/ product