PT-2025-42465 · Gnu+4 · Gnu Binutils+4

Jjleo · Published 2025-10-16 · Updated 2026-04-20 · CVE-2025-11839

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45

Description A security flaw exists in GNU Binutils 2.45, specifically within the tg tag type function located in the prdbg.c file. Manipulation of this function results in an unchecked return value. Exploitation requires local access and the exploit has been publicly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

LPE

Unchecked Return Value

Weakness Enumeration

CWE-252

CWE-253

Related Identifiers

AZL-68772

AZL-68775

BDU:2026-02740

CVE-2025-11839

ECHO-35A6-E58D-A2D7

RHSA-2026:7098

USN-7899-1

Affected Products

Debian

Gnu Binutils

Linuxmint

Red Os

Ubuntu

References · 49

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=33448 · Exploit
• 🔥 https://sourceware.org/bugzilla/attachment.cgi?id=16344 · Exploit
• https://ubuntu.com/security/CVE-2025-1153 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-11839 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-3198 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7899-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-11839 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-7545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1182 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-5244 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11839 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-11839 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-11839 · Vendor Advisory