Binutils: binutils: denial of service via crafted elf file

Summary

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash.

Timeline

1. Apr 22, 2026, 7:54 AM UTCCVE published
2. Apr 22, 2026, 6:33 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Sep 1, 2026, 11:45 AM UTCRecord last updated

Affected versions

• binutils-main

  Version range not reported

• binutils-main

  Version range not reported

• binutils

  Version range not reported

• gcc-toolset-15-binutils

  Version range not reported

• gdb

  Version range not reported

• mingw-binutils

  Version range not reported

• binutils

  Version range not reported

• binutils

  Version range not reported

• gdb

  Version range not reported

• binutils

  Version range not reported

• gcc-toolset-14-binutils

  Version range not reported

• gcc-toolset-14-gdb

  Version range not reported

• gcc-toolset-15-binutils

  Version range not reported

• gcc-toolset-15-gdb

  Version range not reported

• gdb

  Version range not reported

• mingw-binutils

  Version range not reported

• binutils

  Version range not reported

• gcc-toolset-14-binutils

  Version range not reported

• gcc-toolset-15-binutils

  Version range not reported

• gdb

  Version range not reported

• mingw-binutils

  Version range not reported

• openshift/ose-rhel-coreos-8

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

References 4