Wind River Support Network

HomeDefectsLIN1025-25450

Acknowledged

LIN1025-25450 : Security Advisory - binutils - CVE-2026-90801

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Data source: VulDB (cna@vuldb.com)