CVE-2026-90828

A flaw was found in GNU Binutils. A local attacker, by performing a manipulation, can cause a null pointer dereference in the elf_orphan_compatible function. This could lead to a denial of service or other unpredictable behavior.

Red Hat has evaluated this issue as having a Moderate severity because exploitation requires local access or convincing a user to process a crafted object file, and the impact is confined to crashing the binutils process. In typical Red Hat Enterprise Linux environments, binutils utilities are invoked as short-lived build-time tools rather than continuous network services. An abnormal termination of the linker interrupts the specific compilation or link job without granting elevated access or compromising system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.