{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json" } ], "title": "binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing", "tracking": { "current_release_date": "2026-07-13T20:58:34+00:00", "generator": { "date": "2026-07-13T20:58:34+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.2" } }, "id": "CVE-2026-6846", "initial_release_date": "2026-04-08T00:00:00+00:00", "revision_history": [ { "date": "2026-04-08T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-05-04T04:32:50+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-07-13T20:58:34+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 10", "product": { "name": "Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6", "product": { "name": "Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4", "product": { "name": "Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_name", "name": "Red Hat Hardened Images", "product": { "name": "Red Hat Hardened Images", "product_id": "Red Hat Hardened Images", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_family", "name": "Red Hat Hardened Images" }, { "category": "product_version", "name": "binutils-devel", "product": { "name": "binutils-devel", "product_id": "binutils-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils-devel" } } }, { "category": "product_version", "name": "binutils", "product": { "name": "binutils", "product_id": "binutils", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils" } } }, { "category": "product_version", "name": "binutils.src", "product": { "name": "binutils.src", "product_id": "binutils.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils?arch=src" } } }, { "category": "product_version", "name": "binutils-gold", "product": { "name": "binutils-gold", "product_id": "binutils-gold", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils-gold" } } }, { "category": "product_version", "name": "gcc-toolset-15-binutils", "product": { "name": "gcc-toolset-15-binutils", "product_id": "gcc-toolset-15-binutils", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-binutils" } } }, { "category": "product_version", "name": "gcc-toolset-15-binutils-gold", "product": { "name": "gcc-toolset-15-binutils-gold", "product_id": "gcc-toolset-15-binutils-gold", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-binutils-gold" } } }, { "category": "product_version", "name": "gcc-toolset-15-binutils-gprofng", "product": { "name": "gcc-toolset-15-binutils-gprofng", "product_id": "gcc-toolset-15-binutils-gprofng", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-binutils-gprofng" } } }, { "category": "product_version", "name": "gcc-toolset-15-binutils-devel", "product": { "name": "gcc-toolset-15-binutils-devel", "product_id": "gcc-toolset-15-binutils-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-binutils-devel" } } }, { "category": "product_version", "name": "gcc-toolset-15-binutils.src", "product": { "name": "gcc-toolset-15-binutils.src", "product_id": "gcc-toolset-15-binutils.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-binutils?arch=src" } } }, { "category": "product_version", "name": "gdb.src", "product": { "name": "gdb.src", "product_id": "gdb.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb?arch=src" } } }, { "category": "product_version", "name": "gdb-minimal", "product": { "name": "gdb-minimal", "product_id": "gdb-minimal", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb-minimal" } } }, { "category": "product_version", "name": "gdb-gdbserver", "product": { "name": "gdb-gdbserver", "product_id": "gdb-gdbserver", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb-gdbserver" } } }, { "category": "product_version", "name": "gdb-doc", "product": { "name": "gdb-doc", "product_id": "gdb-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb-doc" } } }, { "category": "product_version", "name": "gdb-headless", "product": { "name": "gdb-headless", "product_id": "gdb-headless", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb-headless" } } }, { "category": "product_version", "name": "mingw-binutils-generic", "product": { "name": "mingw-binutils-generic", "product_id": "mingw-binutils-generic", "product_identification_helper": { "purl": "pkg:rpm/redhat/mingw-binutils-generic" } } }, { "category": "product_version", "name": "mingw32-binutils", "product": { "name": "mingw32-binutils", "product_id": "mingw32-binutils", "product_identification_helper": { "purl": "pkg:rpm/redhat/mingw32-binutils" } } }, { "category": "product_version", "name": "mingw64-binutils", "product": { "name": "mingw64-binutils", "product_id": "mingw64-binutils", "product_identification_helper": { "purl": "pkg:rpm/redhat/mingw64-binutils" } } }, { "category": "product_version", "name": "gcc-toolset-14-binutils-gprofng", "product": { "name": "gcc-toolset-14-binutils-gprofng", "product_id": "gcc-toolset-14-binutils-gprofng", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-binutils-gprofng" } } }, { "category": "product_version", "name": "gcc-toolset-14-binutils.src", "product": { "name": "gcc-toolset-14-binutils.src", "product_id": "gcc-toolset-14-binutils.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-binutils?arch=src" } } }, { "category": "product_version", "name": "gcc-toolset-14-binutils", "product": { "name": "gcc-toolset-14-binutils", "product_id": "gcc-toolset-14-binutils", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-binutils" } } }, { "category": "product_version", "name": "gcc-toolset-14-binutils-devel", "product": { "name": "gcc-toolset-14-binutils-devel", "product_id": "gcc-toolset-14-binutils-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-binutils-devel" } } }, { "category": "product_version", "name": "gcc-toolset-14-binutils-gold", "product": { "name": "gcc-toolset-14-binutils-gold", "product_id": "gcc-toolset-14-binutils-gold", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-binutils-gold" } } }, { "category": "product_version", "name": "gcc-toolset-14-gdb.src", "product": { "name": "gcc-toolset-14-gdb.src", "product_id": "gcc-toolset-14-gdb.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-14-gdb?arch=src" } } }, { "category": "product_version", "name": "gcc-toolset-15-gdb.src", "product": { "name": "gcc-toolset-15-gdb.src", "product_id": "gcc-toolset-15-gdb.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-toolset-15-gdb?arch=src" } } }, { "category": "product_version", "name": "gdb", "product": { "name": "gdb", "product_id": "gdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/gdb" } } }, { "category": "product_version", "name": "mingw-binutils.src", "product": { "name": "mingw-binutils.src", "product_id": "mingw-binutils.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/mingw-binutils?arch=src" } } }, { "category": "product_version", "name": "rhcos", "product": { "name": "rhcos", "product_id": "rhcos", "product_identification_helper": { "purl": "pkg:generic/redhat/rhcos" } } }, { "branches": [ { "category": "product_version", "name": "binutils-main@aarch64", "product": { "name": "binutils-main@aarch64", "product_id": "binutils-main@aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.46.1-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms" } } }, { "category": "product_version", "name": "binutils-main@aarch64", "product": { "name": "binutils-main@aarch64", "product_id": "binutils-main@aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.45.1-5.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "binutils-main@src", "product": { "name": "binutils-main@src", "product_id": "binutils-main@src", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.46.1-1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms" } } }, { "category": "product_version", "name": "binutils-main@src", "product": { "name": "binutils-main@src", "product_id": "binutils-main@src", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.45.1-5.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "binutils-main@x86_64", "product": { "name": "binutils-main@x86_64", "product_id": "binutils-main@x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.46.1-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } }, { "category": "product_version", "name": "binutils-main@x86_64", "product": { "name": "binutils-main@x86_64", "product_id": "binutils-main@x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/binutils@2.45.1-5.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "binutils-main@aarch64 as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@aarch64" }, "product_reference": "binutils-main@aarch64", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-main@aarch64 as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@aarch64" }, "product_reference": "binutils-main@aarch64", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-main@src as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@src" }, "product_reference": "binutils-main@src", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-main@src as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@src" }, "product_reference": "binutils-main@src", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-main@x86_64 as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@x86_64" }, "product_reference": "binutils-main@x86_64", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-main@x86_64 as a component of Red Hat Hardened Images", "product_id": "Red Hat Hardened Images:binutils-main@x86_64" }, "product_reference": "binutils-main@x86_64", "relates_to_product_reference": "Red Hat Hardened Images" }, { "category": "default_component_of", "full_product_name": { "name": "binutils as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:binutils" }, "product_reference": "binutils", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:binutils-devel" }, "product_reference": "binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-gold as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:binutils-gold" }, "product_reference": "binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "binutils.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:binutils.src" }, "product_reference": "binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gcc-toolset-15-binutils" }, "product_reference": "gcc-toolset-15-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-devel as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-devel" }, "product_reference": "gcc-toolset-15-binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gold as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gold" }, "product_reference": "gcc-toolset-15-binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gprofng as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gprofng" }, "product_reference": "gcc-toolset-15-binutils-gprofng", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gcc-toolset-15-binutils.src" }, "product_reference": "gcc-toolset-15-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-doc as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gdb-doc" }, "product_reference": "gdb-doc", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-gdbserver as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gdb-gdbserver" }, "product_reference": "gdb-gdbserver", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-headless as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gdb-headless" }, "product_reference": "gdb-headless", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-minimal as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gdb-minimal" }, "product_reference": "gdb-minimal", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gdb.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gdb.src" }, "product_reference": "gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "mingw-binutils-generic as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:mingw-binutils-generic" }, "product_reference": "mingw-binutils-generic", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "mingw32-binutils as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:mingw32-binutils" }, "product_reference": "mingw32-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "mingw64-binutils as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:mingw64-binutils" }, "product_reference": "mingw64-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:binutils-devel" }, "product_reference": "binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "binutils.src as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:binutils.src" }, "product_reference": "binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "binutils as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:binutils" }, "product_reference": "binutils", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:binutils-devel" }, "product_reference": "binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:binutils.src" }, "product_reference": "binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-doc as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:gdb-doc" }, "product_reference": "gdb-doc", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-gdbserver as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:gdb-gdbserver" }, "product_reference": "gdb-gdbserver", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "gdb.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:gdb.src" }, "product_reference": "gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "binutils as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:binutils" }, "product_reference": "binutils", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:binutils-devel" }, "product_reference": "binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "binutils.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:binutils.src" }, "product_reference": "binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-binutils" }, "product_reference": "gcc-toolset-14-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-devel as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-devel" }, "product_reference": "gcc-toolset-14-binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-gold as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gold" }, "product_reference": "gcc-toolset-14-binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-gprofng as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gprofng" }, "product_reference": "gcc-toolset-14-binutils-gprofng", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-binutils.src" }, "product_reference": "gcc-toolset-14-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-gdb.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-14-gdb.src" }, "product_reference": "gcc-toolset-14-gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-devel as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-devel" }, "product_reference": "gcc-toolset-15-binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gold as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gold" }, "product_reference": "gcc-toolset-15-binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gprofng as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gprofng" }, "product_reference": "gcc-toolset-15-binutils-gprofng", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-15-binutils.src" }, "product_reference": "gcc-toolset-15-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-gdb.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gcc-toolset-15-gdb.src" }, "product_reference": "gcc-toolset-15-gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gdb" }, "product_reference": "gdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-doc as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gdb-doc" }, "product_reference": "gdb-doc", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-gdbserver as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gdb-gdbserver" }, "product_reference": "gdb-gdbserver", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-headless as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gdb-headless" }, "product_reference": "gdb-headless", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "gdb.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:gdb.src" }, "product_reference": "gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mingw-binutils-generic as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mingw-binutils-generic" }, "product_reference": "mingw-binutils-generic", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mingw-binutils.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mingw-binutils.src" }, "product_reference": "mingw-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mingw32-binutils as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mingw32-binutils" }, "product_reference": "mingw32-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mingw64-binutils as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mingw64-binutils" }, "product_reference": "mingw64-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "binutils as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:binutils" }, "product_reference": "binutils", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-devel as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:binutils-devel" }, "product_reference": "binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "binutils-gold as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:binutils-gold" }, "product_reference": "binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "binutils.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:binutils.src" }, "product_reference": "binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-14-binutils" }, "product_reference": "gcc-toolset-14-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-devel as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-devel" }, "product_reference": "gcc-toolset-14-binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-gold as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gold" }, "product_reference": "gcc-toolset-14-binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils-gprofng as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gprofng" }, "product_reference": "gcc-toolset-14-binutils-gprofng", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-14-binutils.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-14-binutils.src" }, "product_reference": "gcc-toolset-14-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-15-binutils" }, "product_reference": "gcc-toolset-15-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-devel as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-devel" }, "product_reference": "gcc-toolset-15-binutils-devel", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gold as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gold" }, "product_reference": "gcc-toolset-15-binutils-gold", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils-gprofng as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gprofng" }, "product_reference": "gcc-toolset-15-binutils-gprofng", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-toolset-15-binutils.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gcc-toolset-15-binutils.src" }, "product_reference": "gcc-toolset-15-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb" }, "product_reference": "gdb", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-doc as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb-doc" }, "product_reference": "gdb-doc", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-gdbserver as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb-gdbserver" }, "product_reference": "gdb-gdbserver", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-headless as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb-headless" }, "product_reference": "gdb-headless", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb-minimal as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb-minimal" }, "product_reference": "gdb-minimal", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gdb.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gdb.src" }, "product_reference": "gdb.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "mingw-binutils-generic as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:mingw-binutils-generic" }, "product_reference": "mingw-binutils-generic", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "mingw-binutils.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:mingw-binutils.src" }, "product_reference": "mingw-binutils.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "mingw32-binutils as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:mingw32-binutils" }, "product_reference": "mingw32-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "mingw64-binutils as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:mingw64-binutils" }, "product_reference": "mingw64-binutils", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "rhcos as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:rhcos" }, "product_reference": "rhcos", "relates_to_product_reference": "red_hat_openshift_container_platform_4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Takao Sato" ] } ], "cve": "CVE-2026-6846", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2026-04-08T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_cannot_be_controlled_by_adversary", "product_ids": [ "red_hat_enterprise_linux_10:binutils", "red_hat_enterprise_linux_10:binutils-devel", "red_hat_enterprise_linux_10:binutils-gold", "red_hat_enterprise_linux_10:binutils.src", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_6:binutils-devel", "red_hat_enterprise_linux_6:binutils.src", "red_hat_enterprise_linux_7:binutils", "red_hat_enterprise_linux_7:binutils-devel", "red_hat_enterprise_linux_7:binutils.src", "red_hat_enterprise_linux_7:gdb-doc", "red_hat_enterprise_linux_7:gdb-gdbserver", "red_hat_enterprise_linux_7:gdb.src", "red_hat_enterprise_linux_8:binutils", "red_hat_enterprise_linux_8:binutils-devel", "red_hat_enterprise_linux_8:binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_9:binutils", "red_hat_enterprise_linux_9:binutils-devel", "red_hat_enterprise_linux_9:binutils-gold", "red_hat_enterprise_linux_9:binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils.src" ] }, { "label": "component_not_present", "product_ids": [ "red_hat_enterprise_linux_10:gdb-doc", "red_hat_enterprise_linux_10:gdb-gdbserver", "red_hat_enterprise_linux_10:gdb-headless", "red_hat_enterprise_linux_10:gdb-minimal", "red_hat_enterprise_linux_10:gdb.src", "red_hat_enterprise_linux_9:gdb", "red_hat_enterprise_linux_9:gdb-doc", "red_hat_enterprise_linux_9:gdb-gdbserver", "red_hat_enterprise_linux_9:gdb-headless", "red_hat_enterprise_linux_9:gdb-minimal", "red_hat_enterprise_linux_9:gdb.src" ] }, { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "red_hat_enterprise_linux_8:gcc-toolset-14-gdb.src", "red_hat_enterprise_linux_8:gcc-toolset-15-gdb.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2460006" } ], "notes": [ { "category": "description", "text": "A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.", "title": "Vulnerability description" }, { "category": "summary", "text": "binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Hardened Images:binutils-main@aarch64", "Red Hat Hardened Images:binutils-main@src", "Red Hat Hardened Images:binutils-main@x86_64" ], "known_affected": [ "red_hat_enterprise_linux_10:mingw-binutils-generic", "red_hat_enterprise_linux_10:mingw32-binutils", "red_hat_enterprise_linux_10:mingw64-binutils", "red_hat_enterprise_linux_8:gdb", "red_hat_enterprise_linux_8:gdb-doc", "red_hat_enterprise_linux_8:gdb-gdbserver", "red_hat_enterprise_linux_8:gdb-headless", "red_hat_enterprise_linux_8:gdb.src", "red_hat_enterprise_linux_8:mingw-binutils-generic", "red_hat_enterprise_linux_8:mingw-binutils.src", "red_hat_enterprise_linux_8:mingw32-binutils", "red_hat_enterprise_linux_8:mingw64-binutils", "red_hat_enterprise_linux_9:mingw-binutils-generic", "red_hat_enterprise_linux_9:mingw-binutils.src", "red_hat_enterprise_linux_9:mingw32-binutils", "red_hat_enterprise_linux_9:mingw64-binutils", "red_hat_openshift_container_platform_4:rhcos" ], "known_not_affected": [ "red_hat_enterprise_linux_10:binutils", "red_hat_enterprise_linux_10:binutils-devel", "red_hat_enterprise_linux_10:binutils-gold", "red_hat_enterprise_linux_10:binutils.src", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_10:gdb-doc", "red_hat_enterprise_linux_10:gdb-gdbserver", "red_hat_enterprise_linux_10:gdb-headless", "red_hat_enterprise_linux_10:gdb-minimal", "red_hat_enterprise_linux_10:gdb.src", "red_hat_enterprise_linux_6:binutils-devel", "red_hat_enterprise_linux_6:binutils.src", "red_hat_enterprise_linux_7:binutils", "red_hat_enterprise_linux_7:binutils-devel", "red_hat_enterprise_linux_7:binutils.src", "red_hat_enterprise_linux_7:gdb-doc", "red_hat_enterprise_linux_7:gdb-gdbserver", "red_hat_enterprise_linux_7:gdb.src", "red_hat_enterprise_linux_8:binutils", "red_hat_enterprise_linux_8:binutils-devel", "red_hat_enterprise_linux_8:binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-gdb.src", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-15-gdb.src", "red_hat_enterprise_linux_9:binutils", "red_hat_enterprise_linux_9:binutils-devel", "red_hat_enterprise_linux_9:binutils-gold", "red_hat_enterprise_linux_9:binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_9:gdb", "red_hat_enterprise_linux_9:gdb-doc", "red_hat_enterprise_linux_9:gdb-gdbserver", "red_hat_enterprise_linux_9:gdb-headless", "red_hat_enterprise_linux_9:gdb-minimal", "red_hat_enterprise_linux_9:gdb.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-6846" }, { "category": "external", "summary": "RHBZ#2460006", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460006" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6846", "url": "https://www.cve.org/CVERecord?id=CVE-2026-6846" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6846", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6846" } ], "release_date": "2026-04-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-06-30T13:59:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "Red Hat Hardened Images:binutils-main@aarch64", "Red Hat Hardened Images:binutils-main@src", "Red Hat Hardened Images:binutils-main@x86_64" ], "url": "https://access.redhat.com/errata/RHSA-2026:33527" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "Red Hat Hardened Images:binutils-main@aarch64", "Red Hat Hardened Images:binutils-main@src", "Red Hat Hardened Images:binutils-main@x86_64", "red_hat_enterprise_linux_10:mingw-binutils-generic", "red_hat_enterprise_linux_10:mingw32-binutils", "red_hat_enterprise_linux_10:mingw64-binutils", "red_hat_enterprise_linux_8:gdb", "red_hat_enterprise_linux_8:gdb-doc", "red_hat_enterprise_linux_8:gdb-gdbserver", "red_hat_enterprise_linux_8:gdb-headless", "red_hat_enterprise_linux_8:gdb.src", "red_hat_enterprise_linux_8:mingw-binutils-generic", "red_hat_enterprise_linux_8:mingw-binutils.src", "red_hat_enterprise_linux_8:mingw32-binutils", "red_hat_enterprise_linux_8:mingw64-binutils", "red_hat_enterprise_linux_9:mingw-binutils-generic", "red_hat_enterprise_linux_9:mingw-binutils.src", "red_hat_enterprise_linux_9:mingw32-binutils", "red_hat_enterprise_linux_9:mingw64-binutils", "red_hat_openshift_container_platform_4:rhcos" ] }, { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "red_hat_enterprise_linux_8:gdb", "red_hat_enterprise_linux_8:gdb-doc", "red_hat_enterprise_linux_8:gdb-gdbserver", "red_hat_enterprise_linux_8:gdb-headless", "red_hat_enterprise_linux_8:gdb.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_enterprise_linux_10:mingw-binutils-generic", "red_hat_enterprise_linux_10:mingw32-binutils", "red_hat_enterprise_linux_10:mingw64-binutils", "red_hat_enterprise_linux_8:mingw-binutils-generic", "red_hat_enterprise_linux_8:mingw-binutils.src", "red_hat_enterprise_linux_8:mingw32-binutils", "red_hat_enterprise_linux_8:mingw64-binutils", "red_hat_enterprise_linux_9:mingw-binutils-generic", "red_hat_enterprise_linux_9:mingw-binutils.src", "red_hat_enterprise_linux_9:mingw32-binutils", "red_hat_enterprise_linux_9:mingw64-binutils", "red_hat_openshift_container_platform_4:rhcos" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Red Hat Hardened Images:binutils-main@aarch64", "Red Hat Hardened Images:binutils-main@src", "Red Hat Hardened Images:binutils-main@x86_64", "red_hat_enterprise_linux_10:binutils", "red_hat_enterprise_linux_10:binutils-devel", "red_hat_enterprise_linux_10:binutils-gold", "red_hat_enterprise_linux_10:binutils.src", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_10:gdb-doc", "red_hat_enterprise_linux_10:gdb-gdbserver", "red_hat_enterprise_linux_10:gdb-headless", "red_hat_enterprise_linux_10:gdb-minimal", "red_hat_enterprise_linux_10:gdb.src", "red_hat_enterprise_linux_10:mingw-binutils-generic", "red_hat_enterprise_linux_10:mingw32-binutils", "red_hat_enterprise_linux_10:mingw64-binutils", "red_hat_enterprise_linux_6:binutils-devel", "red_hat_enterprise_linux_6:binutils.src", "red_hat_enterprise_linux_7:binutils", "red_hat_enterprise_linux_7:binutils-devel", "red_hat_enterprise_linux_7:binutils.src", "red_hat_enterprise_linux_7:gdb-doc", "red_hat_enterprise_linux_7:gdb-gdbserver", "red_hat_enterprise_linux_7:gdb.src", "red_hat_enterprise_linux_8:binutils", "red_hat_enterprise_linux_8:binutils-devel", "red_hat_enterprise_linux_8:binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-gdb.src", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-15-gdb.src", "red_hat_enterprise_linux_8:gdb", "red_hat_enterprise_linux_8:gdb-doc", "red_hat_enterprise_linux_8:gdb-gdbserver", "red_hat_enterprise_linux_8:gdb-headless", "red_hat_enterprise_linux_8:gdb.src", "red_hat_enterprise_linux_8:mingw-binutils-generic", "red_hat_enterprise_linux_8:mingw-binutils.src", "red_hat_enterprise_linux_8:mingw32-binutils", "red_hat_enterprise_linux_8:mingw64-binutils", "red_hat_enterprise_linux_9:binutils", "red_hat_enterprise_linux_9:binutils-devel", "red_hat_enterprise_linux_9:binutils-gold", "red_hat_enterprise_linux_9:binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_9:gdb", "red_hat_enterprise_linux_9:gdb-doc", "red_hat_enterprise_linux_9:gdb-gdbserver", "red_hat_enterprise_linux_9:gdb-headless", "red_hat_enterprise_linux_9:gdb-minimal", "red_hat_enterprise_linux_9:gdb.src", "red_hat_enterprise_linux_9:mingw-binutils-generic", "red_hat_enterprise_linux_9:mingw-binutils.src", "red_hat_enterprise_linux_9:mingw32-binutils", "red_hat_enterprise_linux_9:mingw64-binutils", "red_hat_openshift_container_platform_4:rhcos" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "Red Hat Hardened Images:binutils-main@aarch64", "Red Hat Hardened Images:binutils-main@src", "Red Hat Hardened Images:binutils-main@x86_64", "red_hat_enterprise_linux_10:binutils", "red_hat_enterprise_linux_10:binutils-devel", "red_hat_enterprise_linux_10:binutils-gold", "red_hat_enterprise_linux_10:binutils.src", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_10:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_10:gdb-doc", "red_hat_enterprise_linux_10:gdb-gdbserver", "red_hat_enterprise_linux_10:gdb-headless", "red_hat_enterprise_linux_10:gdb-minimal", "red_hat_enterprise_linux_10:gdb.src", "red_hat_enterprise_linux_10:mingw-binutils-generic", "red_hat_enterprise_linux_10:mingw32-binutils", "red_hat_enterprise_linux_10:mingw64-binutils", "red_hat_enterprise_linux_6:binutils-devel", "red_hat_enterprise_linux_6:binutils.src", "red_hat_enterprise_linux_7:binutils", "red_hat_enterprise_linux_7:binutils-devel", "red_hat_enterprise_linux_7:binutils.src", "red_hat_enterprise_linux_7:gdb-doc", "red_hat_enterprise_linux_7:gdb-gdbserver", "red_hat_enterprise_linux_7:gdb.src", "red_hat_enterprise_linux_8:binutils", "red_hat_enterprise_linux_8:binutils-devel", "red_hat_enterprise_linux_8:binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-14-gdb.src", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_8:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_8:gcc-toolset-15-gdb.src", "red_hat_enterprise_linux_8:gdb", "red_hat_enterprise_linux_8:gdb-doc", "red_hat_enterprise_linux_8:gdb-gdbserver", "red_hat_enterprise_linux_8:gdb-headless", "red_hat_enterprise_linux_8:gdb.src", "red_hat_enterprise_linux_8:mingw-binutils-generic", "red_hat_enterprise_linux_8:mingw-binutils.src", "red_hat_enterprise_linux_8:mingw32-binutils", "red_hat_enterprise_linux_8:mingw64-binutils", "red_hat_enterprise_linux_9:binutils", "red_hat_enterprise_linux_9:binutils-devel", "red_hat_enterprise_linux_9:binutils-gold", "red_hat_enterprise_linux_9:binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-14-binutils.src", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-devel", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gold", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils-gprofng", "red_hat_enterprise_linux_9:gcc-toolset-15-binutils.src", "red_hat_enterprise_linux_9:gdb", "red_hat_enterprise_linux_9:gdb-doc", "red_hat_enterprise_linux_9:gdb-gdbserver", "red_hat_enterprise_linux_9:gdb-headless", "red_hat_enterprise_linux_9:gdb-minimal", "red_hat_enterprise_linux_9:gdb.src", "red_hat_enterprise_linux_9:mingw-binutils-generic", "red_hat_enterprise_linux_9:mingw-binutils.src", "red_hat_enterprise_linux_9:mingw32-binutils", "red_hat_enterprise_linux_9:mingw64-binutils", "red_hat_openshift_container_platform_4:rhcos" ] } ], "title": "binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing" } ] }