GNU Binutils up to 2.44 ld bfd/elflink.c elf_gc_sweep memory corruption

Summaryinfo

A vulnerability categorized as critical has been discovered in GNU Binutils up to 2.44. This vulnerability affects the function elf_gc_sweep of the file bfd/elflink.c of the component ld. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2025-5244. The attack needs to be performed locally. Additionally, an exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability.

The advisory is available at sourceware.org. This vulnerability is handled as CVE-2025-5244. The exploitation is known to be easy. Local access is required to approach this attack. Technical details as well as a public exploit are known.

The exploit is available at sourceware.org. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 241905 (CBL Mariner 2.0 Security Update: binutils (CVE-2025-5244)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2.45 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at sourceware.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (241905) and CERT Bund (WID-SEC-2025-1157). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• Open Source binutils

Productinfo

Type

• Programming Tool Software

Vendor

• GNU

Name

• Binutils

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.25
• 2.26
• 2.27
• 2.28
• 2.29
• 2.30
• 2.31
• 2.32
• 2.33
• 2.34
• 2.35
• 2.36
• 2.37
• 2.38
• 2.39
• 2.40
• 2.41
• 2.42
• 2.43
• 2.44

License

• open-source

Website

• Vendor: https://www.gnu.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #584634: GNU Binutils ld 2.44 Memory Corruption (by lcyf-fizz)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion