Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-90803
1.9 LOW
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): Low (L)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): POC (P)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): Low (L)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
created 1 week ago Activity log
  • Created suggestion 1 week ago
GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 addresses this issue. The name of the patch is 471130b39c03623ec6d78ece377ff4da3f6bfe7b. It is recommended to upgrade the affected component.

Affected products

Binutils
  • ==2.48
  • ==2.47

Matching in nixpkgs

pkgs.bintools

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.binutils

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.bintoolsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.binutilsNoLibc

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.cargo-binutils

Cargo subcommands to invoke the LLVM tools shipped with the Rust toolchain

  • nixos-unstable -
    • nixos-unstable-small 0.4.0
  • nixos-26.05 -
    • nixos-26.05-small 0.4.0

pkgs.binutils_nogold

Tools for manipulating binaries (linker, assembler, etc.) (wrapper script)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.darwin.binutils

System binary utilities (wrapper script)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.bintools-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.binutils-unwrapped

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -
    • nixos-unstable-small 2.46
  • nixos-26.05 -
    • nixos-26.05-small 2.46

pkgs.binutils-unwrapped_2_38

Tools for manipulating binaries (linker, assembler, etc.)

  • nixos-unstable -
    • nixos-unstable-small 2.38
  • nixos-26.05 -
    • nixos-26.05-small 2.38