CVE-2026-90803

A flaw was found in GNU Binutils. A local attacker could exploit a buffer overflow vulnerability in the elf_x86_64_relocate_section function of the ld component by providing a malformed relocation. This could lead to potential information disclosure, data corruption, or denial of service.

This vulnerability is rated as Moderate impact for Red Hat products because exploitation requires an attacker to induce a user or automated pipeline into linking a specially crafted object file, limiting the blast radius to the local privileges of that build process. The GNU Binutils linker is an on-demand development utility rather than an exposed persistent network service or privileged daemon. Consequently, the primary risk involves disruption or corruption during the compilation and assembly of untrusted code artifacts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.