CVE catalog

CVE-2025-11413

GNU binutils vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.22% · Oct 25, 2026

A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upgrading the affected component is advised.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3vulnerable
Debianbinutilsbookworm2.40-2vulnerable
UbuntubinutilsnobleNot reportedvulnerable
Ubuntubinutilsnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-aarch64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-alpha-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arc-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arm-linux-gnueabinoble2.42-4ubuntu2.8fixed
Ubuntubinutils-arm-linux-gnueabihfnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-commonnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-devnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-docnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-for-buildnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-for-hostnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-hppa-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-hppa64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-kfreebsd-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-i686-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-ia64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-loongarch64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-m68k-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-multiarchnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-multiarch-devnoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-powerpc64le-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-riscv64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-s390x-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sh4-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sourcenoble2.42-4ubuntu2.8fixed
Ubuntubinutils-sparc64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-kfreebsd-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-linux-gnunoble2.42-4ubuntu2.8fixed
Ubuntubinutils-x86-64-linux-gnux32noble2.42-4ubuntu2.8fixed
Ubuntulibbinutilsnoble2.42-4ubuntu2.8fixed
Ubuntulibctf-nobfd0noble2.42-4ubuntu2.8fixed
Ubuntulibctf0noble2.42-4ubuntu2.8fixed
Ubuntulibgprofng0noble2.42-4ubuntu2.8fixed
Ubuntulibsframe1noble2.42-4ubuntu2.8fixed
CpebinutilsNot reportedNot reportedunknown
Ubuntubinutilspro2.33-2ubuntu1vulnerable
Ubuntubinutilspro2.33.1-1ubuntu1vulnerable
Ubuntubinutilspro2.33.1-5ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu3vulnerable
Ubuntubinutilspro2.33.90.20200122-1ubuntu2vulnerable
Ubuntubinutilspro2.34-1ubuntu1vulnerable
Ubuntubinutilspro2.34-3ubuntu1vulnerable
Ubuntubinutilspro2.34-4ubuntu1vulnerable
Ubuntubinutilspro2.34-5ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.3vulnerable
Ubuntubinutilspro2.34-6ubuntu1.4vulnerable
Ubuntubinutilspro2.34-6ubuntu1.5vulnerable
Ubuntubinutilspro2.34-6ubuntu1.6vulnerable
Ubuntubinutilspro2.34-6ubuntu1.7vulnerable
Ubuntubinutilspro2.34-6ubuntu1.8vulnerable
Ubuntubinutilspro2.34-6ubuntu1.9vulnerable
Ubuntubinutilspro2.34-6ubuntu1.10vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11+esm1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11+esm2fixed
Ubuntubinutils22.042.37-7ubuntu1vulnerable
Ubuntubinutils22.042.37-9ubuntu1vulnerable
Ubuntubinutils22.042.37-10ubuntu1vulnerable
Ubuntubinutils22.042.37.50.20220106-2ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220126-0ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220130-0ubuntu2vulnerable
Ubuntubinutils22.042.38-1ubuntu1vulnerable
Ubuntubinutils22.042.38-2ubuntu1vulnerable
Ubuntubinutils22.042.38-3ubuntu1vulnerable
Ubuntubinutils22.042.38-4ubuntu2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.1vulnerable
Ubuntubinutils22.042.38-4ubuntu2.2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.3vulnerable
Ubuntubinutils22.042.38-4ubuntu2.4vulnerable
Ubuntubinutils22.042.38-4ubuntu2.5vulnerable
Ubuntubinutils22.042.38-4ubuntu2.6vulnerable
Ubuntubinutils22.042.38-4ubuntu2.7vulnerable
Ubuntubinutils22.042.38-4ubuntu2.8vulnerable
Ubuntubinutils22.042.38-4ubuntu2.10vulnerable
Ubuntubinutils22.042.38-4ubuntu2.11vulnerable
Ubuntubinutils22.042.38-4ubuntu2.12fixed
Ubuntubinutils24.042.41-5ubuntu1vulnerable
Ubuntubinutils24.042.41-6ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231206-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231214-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231227-1ubuntu1vulnerable
Ubuntubinutils24.042.41.90.20240122-1ubuntu1vulnerable
Ubuntubinutils24.042.42-2ubuntu1vulnerable
Ubuntubinutils24.042.42-3ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu2vulnerable
Ubuntubinutils24.042.42-4ubuntu2.3vulnerable
Ubuntubinutils24.042.42-4ubuntu2.4vulnerable
Ubuntubinutils24.042.42-4ubuntu2.5vulnerable
Ubuntubinutils24.042.42-4ubuntu2.6vulnerable
Ubuntubinutils24.042.42-4ubuntu2.7vulnerable
Ubuntubinutils24.042.42-4ubuntu2.8fixed
Ubuntubinutils25.102.44-3ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250602-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250604-0ubuntu2vulnerable
Ubuntubinutils25.102.44.50.20250616-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250707-1ubuntu1vulnerable
Ubuntubinutils25.102.45-1ubuntu1vulnerable
Ubuntubinutils25.102.45-3ubuntu3vulnerable
Ubuntubinutils25.102.45-6ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1.1vulnerable
Ubuntubinutils25.102.45-7ubuntu1.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.46-1unimportantNot reportedNot reported
Debianbinutilssourceforky2.46-1unimportantNot reportedNot reported
Debianbinutilssourcetrixie(unfixed)unimportantNot reportedNot reported
Debianbinutilssourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntubinutilsdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-aarch64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-alpha-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arc-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabidebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabihfdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-commondebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-devdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-docdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-for-builddebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-for-hostdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-hppa-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-hppa64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-kfreebsd-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-i686-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-ia64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-loongarch64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-m68k-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-multiarchdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-multiarch-devdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64le-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-riscv64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-s390x-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sh4-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sourcedebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-sparc64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-kfreebsd-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnudebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnux32debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibbinutilsdebnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibctf-nobfd0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibctf0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibgprofng0debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntulibsframe1debnoble2.42-4ubuntu2.8Not reportedNot reportedNot reported
Ubuntubinutilsdebpro2.34-6ubuntu1.11+esm2Not reportedUBUNTU-CVE-2025-11413Not reported
Ubuntubinutilsdeb22.042.38-4ubuntu2.12Not reportedUBUNTU-CVE-2025-11413Not reported
Ubuntubinutilsdeb24.042.42-4ubuntu2.8Not reportedUBUNTU-CVE-2025-11413Not reported
Ubuntubinutilsdeb25.102.45-7ubuntu1.2Not reportedUBUNTU-CVE-2025-11413Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [binutils]Affected
    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-common]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-dev]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-doc]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

Next results

Observed:

References