Description
A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | Binutils | 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.21, 2.22, 2.23, 2.24, 2.25, 2.26, 2.27, 2.28, 2.29, 2.30, 2.31, 2.32, 2.33, 2.34, 2.35, 2.36, 2.37, 2.38, 2.39, 2.40, 2.41, 2.42, 2.43, 2.44 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | binutils | 2.45-3 | — |
| Debian 13 | binutils | No fix yet | — |
| Debian 12 | binutils | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | binutils | 2.45-7ubuntu1.1 | USN-7899-1 |
| Ubuntu 24.04 LTS | binutils | 2.42-4ubuntu2.6 | USN-7899-1, USN-7847-1 |
| Ubuntu 22.04 LTS | binutils | 2.38-4ubuntu2.10 | USN-7899-1, USN-7847-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | binutils | 2.34-6ubuntu1.11+esm1 | USN-7899-1 |
| Ubuntu Pro 18.04 LTS | binutils | 2.30-21ubuntu1~18.04.9+esm5 | USN-7899-1 |
| Ubuntu Pro 16.04 LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm13 | USN-7899-1 |
| Ubuntu Pro 14.04 LTS | binutils | 2.24-5ubuntu14.2+esm7 | USN-7899-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | binutils +2 | 2.41-58.el10 | RHSA-2025:20155 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | binutils +2 | 2.41-58.el10.alma.1 | ALSA-2025:20155 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | binutils | 2.41-58.el10 | RLSA-2025:20155 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP7 | openucx | 1.17.0-150700.4.2.7 | SUSE-SU-2025:4096-1 |
| SLES 15 SP7 | perf | 6.4.0.git54263.0aad576b1c-150700.3.2.2 | SUSE-SU-2025:4096-1 |
| SLES 15 SP6 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP6 | openucx | 1.15.0-150600.3.5.2 | SUSE-SU-2025:4096-1 |
| SLES 15 SP6 | perf | 6.4.0.git33229.a3afe13a7f-150600.3.17.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP5 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP5 | openucx | 1.13.1-150500.4.2.5 | SUSE-SU-2025:4096-1 |
| SLES 15 SP5 | perf | 5.14.21-150500.52.5.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP4 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP4 | openucx | 1.11.1-150400.4.2.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP4 | perf | 5.14.21-150400.44.20.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP3 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES 15 SP3 | openucx | 1.9.0-150300.4.2.5 | SUSE-SU-2025:4096-1 |
| SLES 15 SP3 | perf | 5.3.18-150300.38.7.1 | SUSE-SU-2025:4096-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | binutils | 2.45-160000.1.1 | SUSE-SU-2025:21195-1 |
| SLES for SAP 16.0 | bpftool | 7.5.0-160000.2.3 | SUSE-SU-2025:21195-1 |
| SLES for SAP 15 SP5 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP5 | openucx | 1.13.1-150500.4.2.5 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP5 | perf | 5.14.21-150500.52.5.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP4 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP4 | openucx | 1.11.1-150400.4.2.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP4 | perf | 5.14.21-150400.44.20.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP3 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP3 | openucx | 1.9.0-150300.4.2.5 | SUSE-SU-2025:4096-1 |
| SLES for SAP 15 SP3 | perf | 5.3.18-150300.38.7.1 | SUSE-SU-2025:4096-1 |
| SLES 16.0 | binutils | 2.45-160000.1.1 | SUSE-SU-2025:21195-1 |
| SLES 16.0 | bpftool | 7.5.0-160000.2.3 | SUSE-SU-2025:21195-1 |
| SLE Micro 6.2 | binutils | 2.45-160000.1.1 | SUSE-SU-2025:21197-1 |
| SLE HPC 15 SP5 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP5 | openucx | 1.13.1-150500.4.2.5 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP5 | perf | 5.14.21-150500.52.5.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP4 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP4 | openucx | 1.11.1-150400.4.2.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP4 | perf | 5.14.21-150400.44.20.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP3 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP3 | openucx | 1.9.0-150300.4.2.5 | SUSE-SU-2025:4096-1 |
| SLE HPC 15 SP3 | perf | 5.3.18-150300.38.7.1 | SUSE-SU-2025:4096-1 |
| SUSE Manager Server LTS 4.3 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SUSE Manager Server LTS 4.3 | openucx | 1.11.1-150400.4.2.1 | SUSE-SU-2025:4096-1 |
| SUSE Manager Proxy LTS 4.3 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SUSE Manager Proxy LTS 4.3 | openucx | 1.11.1-150400.4.2.1 | SUSE-SU-2025:4096-1 |
| SUSE Enterprise Storage 7.1 | binutils | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| SUSE Enterprise Storage 7.1 | openucx | 1.9.0-150300.4.2.5 | SUSE-SU-2025:4096-1 |
| SUSE Enterprise Storage 7.1 | perf | 5.3.18-150300.38.7.1 | SUSE-SU-2025:4096-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | binutils | 2.45-1.2 | openSUSE-SU-2025:15651-1 |
| openSUSE Leap 16.0 | binutils +25 | 2.45-160000.1.1 | openSUSE-SU-2025:20150-1 |
| openSUSE Leap 16.0 | bpftool | 7.5.0-160000.2.3 | openSUSE-SU-2025:20150-1 |
| openSUSE Leap 15.6 | binutils +24 | 2.45-150100.7.57.1 | SUSE-SU-2025:4096-1 |
| openSUSE Leap 15.6 | openucx | 1.15.0-150600.3.5.2 | SUSE-SU-2025:4096-1 |
| openSUSE Leap 15.6 | perf | 6.4.0.git33229.a3afe13a7f-150600.3.17.1 | SUSE-SU-2025:4096-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.22 | binutils | 2.44-r3 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | binutils | 2.41-6 | — |
| Azure Linux 2 (CBL-Mariner) | binutils | 2.37-15 | — |
| Azure Linux 2 (CBL-Mariner) | gdb | 11.2-10 | — |
Advisories 17
- WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- ALSA-2025:20155 Moderate: binutils security update AlmaLinux Security Advisories · Oct 29, 2026
- SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
- SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
- RHSA-2025:20155 Red Hat Security Advisory: binutils security update Red Hat Security Advisories (RHSA) · Sep 2, 2026
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
- USN-7899-1 binutils vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- ICSA-25-162-05 Siemens SIMATIC S7-1500 CPU family CISA ICS & IT advisories · May 14, 2026
- ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
- USN-7847-1 binutils vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2025:20150-1 Security update for binutils SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15651-1 binutils-2.45-1.2 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4096-1 Security update for binutils SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21197-1 Security update for binutils SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21195-1 Security update for binutils SUSE / openSUSE Security Updates · Mar 23, 2026
- RLSA-2025:20155 Moderate: binutils security update Rocky Linux Security Advisories · Jan 23, 2026
- WID-SEC-2025-1157 binutils: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jan 22, 2026
References
- VDB-310346 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption vdb-entry technical-description
- VDB-310346 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #584634 | GNU Binutils ld 2.44 Memory Corruption third-party-advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=32858 issue-tracking
- https://sourceware.org/bugzilla/attachment.cgi?id=16010 exploit
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d1458933830456e54223d9fc61f0d9b3a19256f5 patch
- https://www.gnu.org/ broken-link product