CVE-2026-90831

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the _bfd_elf_strtab_delref function. This could lead to unexpected behavior or system instability.

This vulnerability is rated as Moderate impact because exploitation requires local access or convincing a user or build pipeline to process a maliciously crafted ELF file. Although the resulting memory corruption can lead to application termination or arbitrary code execution within the context of the invoking user, it does not directly enable privilege escalation across system security boundaries. In standard Red Hat Enterprise Linux environments, binutils binaries operate as transient, unprivileged command-line utilities.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.