Linux Distros Unpatched Vulnerability : CVE-2026-19548
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
| CVE-2026-19548 | 12 Aug 202615:51 | – | attackerkb | |
| CVE-2026-19548 | 12 Aug 202615:51 | – | cve | |
| CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing | 12 Aug 202615:51 | – | cvelist | |
| EUVD-2026-57318 | 12 Aug 202615:51 | – | euvd | |
| CVE-2026-19548 | 12 Aug 202616:16 | – | nvd | |
| UBUNTU-CVE-2026-19548 | 13 Aug 202600:00 | – | osv | |
| PT-2026-71137 | 12 Aug 202600:00 | – | ptsecurity | |
| CVE-2026-19548 | 12 Aug 202615:51 | – | redhatcve | |
| CVE-2026-19548 | 13 Aug 202600:00 | – | ubuntucve | |
| CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing | 12 Aug 202615:51 | – | vulnrichment |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(334929);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/13");
script_cve_id("CVE-2026-19548");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-19548");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of
the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c
frees the original BFD object via bfd_close/_bfd_delete_bfd when entry->the_bfd->my_archive == NULL, but
the caller retains both the original abfd parameter and a shallow copy (orig_input.the_bfd) as dangling
pointers. These dangling pointers are subsequently dereferenced at three distinct locations in
add_archive_element: 1. Line ~1442: accessing abfd->my_archive via bfd_usrdata(abfd->my_archive) 2. Line
~1493: multiple accesses to abfd and abfd->my_archive in a conditional check and bfd_get_filename call 3.
Line ~1525: dereferencing the shallow copy orig_input.the_bfd->my_archive in trace/verbose logging The
vulnerability is triggered when LTO plugins are active (link_info.lto_plugin_active is true) and the input
object has abfd->my_archive == NULL, which is a valid state for standalone object files. Red Hat builds
binutils with --enable-plugins and --enable-lto, confirming the vulnerable code path is compiled in and
reachable. An attacker who can supply a crafted object or archive file to a build process using LTO-
enabled linking could exploit this flaw to cause a denial of service (linker crash via segmentation
fault). Arbitrary code execution is theoretically possible through heap manipulation but is substantially
mitigated by hardening measures including stack protector, FORTIFY_SOURCE, ASLR, and PIE. The attack
surface is limited to build-time environments the linker is a development tool not exposed in production
runtime. The most realistic exploitation scenario is a supply chain attack introducing a crafted object
file as a build dependency in CI/CD pipelines or development environments. (CVE-2026-19548)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2026-19548");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-19548");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-19548");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/12");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/12");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-14-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-15-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:gcc-toolset-16-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-binutils-generic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw32-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw64-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-14-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-gold");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-15-binutils-gprofng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:gcc-toolset-16-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-binutils-generic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw32-binutils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw64-binutils");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Ubuntu Linux-14.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-hppa64"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-source"},
{"reference": "binutils-static"},
{"reference": "binutils-static-udeb"}
]
}
]
},
"Ubuntu Linux-16.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "16.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-m68k-linux-gnu"},
{"reference": "binutils-mips-linux-gnu"},
{"reference": "binutils-mips64-linux-gnuabi64"},
{"reference": "binutils-mips64el-linux-gnuabi64"},
{"reference": "binutils-mipsel-linux-gnu"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc-linux-gnu"},
{"reference": "binutils-powerpc-linux-gnuspe"},
{"reference": "binutils-powerpc64-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-sh4-linux-gnu"},
{"reference": "binutils-source"},
{"reference": "binutils-sparc64-linux-gnu"}
]
}
]
},
"Ubuntu Linux-18.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "18.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-mips-linux-gnu"},
{"reference": "binutils-mips-linux-gnu-dbg"},
{"reference": "binutils-mips64el-linux-gnuabi64"},
{"reference": "binutils-mips64el-linux-gnuabi64-dbg"},
{"reference": "binutils-mipsel-linux-gnu"},
{"reference": "binutils-mipsel-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"}
]
}
]
},
"Ubuntu Linux-20.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "20.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-ia64-linux-gnu"},
{"reference": "binutils-ia64-linux-gnu-dbg"},
{"reference": "binutils-m68k-linux-gnu"},
{"reference": "binutils-m68k-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"}
]
}
]
},
"Ubuntu Linux-22.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "22.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-ia64-linux-gnu"},
{"reference": "binutils-ia64-linux-gnu-dbg"},
{"reference": "binutils-m68k-linux-gnu"},
{"reference": "binutils-m68k-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"}
]
}
]
},
"Ubuntu Linux-24.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "24.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arc-linux-gnu"},
{"reference": "binutils-arc-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa-linux-gnu-dbg"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"},
{"reference": "libgprofng0"},
{"reference": "libgprofng0-dbg"},
{"reference": "libsframe1"},
{"reference": "libsframe1-dbg"}
]
}
]
},
"Ubuntu Linux-26.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "26.04",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-aarch64-linux-gnu"},
{"reference": "binutils-aarch64-linux-gnu-dbg"},
{"reference": "binutils-alpha-linux-gnu"},
{"reference": "binutils-alpha-linux-gnu-dbg"},
{"reference": "binutils-arc-linux-gnu"},
{"reference": "binutils-arc-linux-gnu-dbg"},
{"reference": "binutils-arm-linux-gnueabi"},
{"reference": "binutils-arm-linux-gnueabi-dbg"},
{"reference": "binutils-arm-linux-gnueabihf"},
{"reference": "binutils-arm-linux-gnueabihf-dbg"},
{"reference": "binutils-common"},
{"reference": "binutils-dbg"},
{"reference": "binutils-dev"},
{"reference": "binutils-doc"},
{"reference": "binutils-for-build"},
{"reference": "binutils-for-host"},
{"reference": "binutils-hppa-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu"},
{"reference": "binutils-hppa64-linux-gnu-dbg"},
{"reference": "binutils-i686-linux-gnu"},
{"reference": "binutils-i686-linux-gnu-dbg"},
{"reference": "binutils-multiarch"},
{"reference": "binutils-multiarch-dbg"},
{"reference": "binutils-multiarch-dev"},
{"reference": "binutils-powerpc64le-linux-gnu"},
{"reference": "binutils-powerpc64le-linux-gnu-dbg"},
{"reference": "binutils-s390x-linux-gnu"},
{"reference": "binutils-s390x-linux-gnu-dbg"},
{"reference": "binutils-source"},
{"reference": "binutils-x86-64-linux-gnu"},
{"reference": "binutils-x86-64-linux-gnu-dbg"},
{"reference": "libbinutils"},
{"reference": "libbinutils-dbg"},
{"reference": "libctf-nobfd0"},
{"reference": "libctf-nobfd0-dbg"},
{"reference": "libctf0"},
{"reference": "libctf0-dbg"},
{"reference": "libgprofng-dev"},
{"reference": "libgprofng0"},
{"reference": "libgprofng0-dbg"},
{"reference": "libsframe-dev"},
{"reference": "libsframe3"},
{"reference": "libsframe3-dbg"}
]
}
]
},
"Red Hat Enterprise Linux-10": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "10",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "binutils-gold"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "gcc-toolset-16-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"CentOS Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"}
]
}
]
},
"Red Hat Enterprise Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"}
]
}
]
},
"CentOS Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"Red Hat Enterprise Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
},
"Red Hat Enterprise Linux-9": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "9",
"pkgs": [
{"reference": "binutils"},
{"reference": "binutils-devel"},
{"reference": "binutils-gold"},
{"reference": "gcc-toolset-14-binutils"},
{"reference": "gcc-toolset-14-binutils-devel"},
{"reference": "gcc-toolset-14-binutils-gold"},
{"reference": "gcc-toolset-14-binutils-gprofng"},
{"reference": "gcc-toolset-15-binutils"},
{"reference": "gcc-toolset-15-binutils-devel"},
{"reference": "gcc-toolset-15-binutils-gold"},
{"reference": "gcc-toolset-15-binutils-gprofng"},
{"reference": "gcc-toolset-16-binutils"},
{"reference": "mingw-binutils"},
{"reference": "mingw-binutils-generic"},
{"reference": "mingw32-binutils"},
{"reference": "mingw64-binutils"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
var third_party_vendors = distro_constraints_values['third_party'];
if (!empty_or_null(third_party_vendors)) {
var vendor;
foreach vendor (third_party_vendors) {
if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
}
}
}
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Aug 2026 00:00Current
6Medium risk
Vulners AI Score6
CVSS 3.15.5
EPSS0.00122
SSVC