CVE catalog

CVE-2025-11839

GNU binutils vulnerabilities

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3vulnerable
Debianbinutilsbookworm2.40-2vulnerable
UbuntubinutilsnobleNot reportedvulnerable
Ubuntubinutilsnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-aarch64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-alpha-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-arc-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-arm-linux-gnueabinoble2.42-4ubuntu2.7fixed
Ubuntubinutils-arm-linux-gnueabihfnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-commonnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-devnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-docnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-for-buildnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-for-hostnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-hppa-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-hppa64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-i686-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-i686-kfreebsd-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-i686-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-ia64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-loongarch64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-m68k-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-multiarchnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-multiarch-devnoble2.42-4ubuntu2.7fixed
Ubuntubinutils-powerpc-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-powerpc64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-powerpc64le-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-riscv64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-s390x-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-sh4-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-sourcenoble2.42-4ubuntu2.7fixed
Ubuntubinutils-sparc64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-x86-64-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-x86-64-kfreebsd-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-x86-64-linux-gnunoble2.42-4ubuntu2.7fixed
Ubuntubinutils-x86-64-linux-gnux32noble2.42-4ubuntu2.7fixed
Ubuntulibbinutilsnoble2.42-4ubuntu2.7fixed
Ubuntulibctf-nobfd0noble2.42-4ubuntu2.7fixed
Ubuntulibctf0noble2.42-4ubuntu2.7fixed
Ubuntulibgprofng0noble2.42-4ubuntu2.7fixed
Ubuntulibsframe1noble2.42-4ubuntu2.7fixed
CpebinutilsNot reportedNot reportedunknown
Ubuntubinutilspro2.33-2ubuntu1vulnerable
Ubuntubinutilspro2.33.1-1ubuntu1vulnerable
Ubuntubinutilspro2.33.1-5ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu1vulnerable
Ubuntubinutilspro2.33.1-6ubuntu3vulnerable
Ubuntubinutilspro2.33.90.20200122-1ubuntu2vulnerable
Ubuntubinutilspro2.34-1ubuntu1vulnerable
Ubuntubinutilspro2.34-3ubuntu1vulnerable
Ubuntubinutilspro2.34-4ubuntu1vulnerable
Ubuntubinutilspro2.34-5ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.1vulnerable
Ubuntubinutilspro2.34-6ubuntu1.3vulnerable
Ubuntubinutilspro2.34-6ubuntu1.4vulnerable
Ubuntubinutilspro2.34-6ubuntu1.5vulnerable
Ubuntubinutilspro2.34-6ubuntu1.6vulnerable
Ubuntubinutilspro2.34-6ubuntu1.7vulnerable
Ubuntubinutilspro2.34-6ubuntu1.8vulnerable
Ubuntubinutilspro2.34-6ubuntu1.9vulnerable
Ubuntubinutilspro2.34-6ubuntu1.10vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11vulnerable
Ubuntubinutilspro2.34-6ubuntu1.11+esm1fixed
Ubuntubinutils22.042.37-7ubuntu1vulnerable
Ubuntubinutils22.042.37-9ubuntu1vulnerable
Ubuntubinutils22.042.37-10ubuntu1vulnerable
Ubuntubinutils22.042.37.50.20220106-2ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220126-0ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220130-0ubuntu2vulnerable
Ubuntubinutils22.042.38-1ubuntu1vulnerable
Ubuntubinutils22.042.38-2ubuntu1vulnerable
Ubuntubinutils22.042.38-3ubuntu1vulnerable
Ubuntubinutils22.042.38-4ubuntu2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.1vulnerable
Ubuntubinutils22.042.38-4ubuntu2.2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.3vulnerable
Ubuntubinutils22.042.38-4ubuntu2.4vulnerable
Ubuntubinutils22.042.38-4ubuntu2.5vulnerable
Ubuntubinutils22.042.38-4ubuntu2.6vulnerable
Ubuntubinutils22.042.38-4ubuntu2.7vulnerable
Ubuntubinutils22.042.38-4ubuntu2.8vulnerable
Ubuntubinutils22.042.38-4ubuntu2.10vulnerable
Ubuntubinutils22.042.38-4ubuntu2.11fixed
Ubuntubinutils24.042.41-5ubuntu1vulnerable
Ubuntubinutils24.042.41-6ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231206-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231214-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231227-1ubuntu1vulnerable
Ubuntubinutils24.042.41.90.20240122-1ubuntu1vulnerable
Ubuntubinutils24.042.42-2ubuntu1vulnerable
Ubuntubinutils24.042.42-3ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu2vulnerable
Ubuntubinutils24.042.42-4ubuntu2.3vulnerable
Ubuntubinutils24.042.42-4ubuntu2.4vulnerable
Ubuntubinutils24.042.42-4ubuntu2.5vulnerable
Ubuntubinutils24.042.42-4ubuntu2.6vulnerable
Ubuntubinutils24.042.42-4ubuntu2.7fixed
Ubuntubinutils25.102.44-3ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250602-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250604-0ubuntu2vulnerable
Ubuntubinutils25.102.44.50.20250616-0ubuntu1vulnerable
Ubuntubinutils25.102.44.50.20250707-1ubuntu1vulnerable
Ubuntubinutils25.102.45-1ubuntu1vulnerable
Ubuntubinutils25.102.45-3ubuntu3vulnerable
Ubuntubinutils25.102.45-6ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1vulnerable
Ubuntubinutils25.102.45-7ubuntu1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.46-1unimportantNot reportedNot reported
Debianbinutilssourceforky2.46-1unimportantNot reportedNot reported
Debianbinutilssourcetrixie(unfixed)unimportantNot reportedNot reported
Debianbinutilssourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntubinutilsdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-aarch64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-alpha-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-arc-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabidebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabihfdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-commondebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-devdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-docdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-for-builddebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-for-hostdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-hppa-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-hppa64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-i686-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-i686-kfreebsd-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-i686-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-ia64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-loongarch64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-m68k-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-multiarchdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-multiarch-devdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-powerpc-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64le-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-riscv64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-s390x-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-sh4-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-sourcedebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-sparc64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-kfreebsd-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnudebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnux32debnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntulibbinutilsdebnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntulibctf-nobfd0debnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntulibctf0debnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntulibgprofng0debnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntulibsframe1debnoble2.42-4ubuntu2.7Not reportedNot reportedNot reported
Ubuntubinutilsdebpro2.34-6ubuntu1.11+esm1Not reportedUBUNTU-CVE-2025-11839Not reported
Ubuntubinutilsdeb22.042.38-4ubuntu2.11Not reportedUBUNTU-CVE-2025-11839Not reported
Ubuntubinutilsdeb24.042.42-4ubuntu2.7Not reportedUBUNTU-CVE-2025-11839Not reported
Ubuntubinutilsdeb25.102.45-7ubuntu1.1Not reportedUBUNTU-CVE-2025-11839Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [binutils]Affected
    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-common]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-dev]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-doc]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

Next results

Observed:

References