CVE-2026-90804

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the _bfd_elf_write_section_eh_frame function, part of the Eh Frame Section Handler. A local attacker can exploit this by providing specially crafted input that manipulates arguments such as cie_length or fde_length. This manipulation can lead to a denial of service.

This vulnerability is rated as having Moderate impact because exploitation requires a user to actively process or link an untrusted, specially prepared binary file locally. In standard Red Hat Enterprise Linux and container deployments, binutils tools are ephemeral command-line utilities rather than persistent network services. Therefore, any failure is confined to a local crash or denial of service affecting the invoking process, preventing automatic or widespread compromise across systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.