CVE-2026-90830

A flaw was found in GNU Binutils. This vulnerability, located in the _bfd_write_merged_section function within the Section Merge component, allows a local attacker to trigger a null pointer dereference. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.

This vulnerability is rated as having a Moderate impact because it requires local interaction and exploitation is confined to an application crash, posing no risk to system confidentiality or integrity. In typical Red Hat environments, the affected binary utilities execute as transient userland tasks rather than persistent system daemons. Consequently, encountering a malformed input causes the invoked tool to terminate abruptly without compromising broader host availability or allowing privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.