CVE-2026-97034

The Go toolchain (cmd/go) is vulnerable to arbitrary command execution at link time when building malicious packages that use cgo with the GCC compiler. The root cause is that GCC's built-in link spec evaluates certain include patterns (e.g., %:include(libgomp.spec)) and searches for GCC spec fil...

CVE-2026-97037

The Go toolchain (cmd/go) is vulnerable to linker script injection when building packages that use cgo . A malicious package can use LDFLAGS to pass linker script files to the host linker. Specifically, split -Wl, flags (like -Wl,-rpath) previously accepted bare second arguments, which the compil...

CVE-2026-97034: Go toolchain cmd/go: When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link time via…

When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link time via untrusted GCC spec files "specs" or ".spec". When linking with "-fopenmp", "-fopenacc", or "-fsanitize=" in "cgo LDFLAGS", GCC's built-in link spec evaluates "%:includelibgomp.spec"...

CVE-2026-97037: Go toolchain cmd/go: Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script…

Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script files to the host linker via "cgo LDFLAGS". Split "-Wl," flags that consume a following argument such as "-Wl,-rpath", "-Wl,--just-symbols", and "-Wl,-undefined" previously accept...

PT-2026-144957

When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link time via untrusted GCC spec files "specs" or ".spec". When linking with "-fopenmp", "-fopenacc", or "-fsanitize=" in "cgo LDFLAGS", GCC's built-in link spec evaluates "%:includelibgomp.spec"...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the hugetlbpmdshared function within the include/linux/hugetlb.h module of the Linux kernel is related to errors occurring during link count updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the snruncoremmiomap function in the arch/x86/events/intel/uncoresnbep.c module of the Linux operating system’s kernel on x86 platforms is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ARM Kernel Heap Buffer Overflow DoS

The vulnerability of the zynqearlyslcrinit function in the arch/arm/mach-zynq/slcr.c module of the Linux operating system’s ARM kernel is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the vgicitsinvalidatecache function in the arch/arm64/kvm/vgic/vgic-its.c module of the Linux operating system is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ARM Platform Buffer Overflow DoS

The vulnerability of the op4sraminit function in the arch/arm/mach-omap2/omap4-common.c file, which is part of the Linux operating system’s ARM platform support module, is related to errors during link time. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux ARM Platform Buffer Overflow DoS

The vulnerability of the oppsdssinitfbdev function in the arch/arm/mach-omap2/display.c file, which is part of the ARM platform support for the Linux operating system, is related to errors during link time. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-23316

A flaw was found in the Linux kernel's handling of multipath hash seeds on ARM64 architectures. This vulnerability can lead to a system crash kernel panic when the kernel is compiled with specific optimizations, such as Clang with Link-Time Optimization LTO, due to an alignment fault during memor...

SUSE SLES16: binutils / binutils-devel / bpftool / bpftool-bash-completion / etc (SUSE-SU-2025:21195-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21195-1 advisory. Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 a problem related to LTO vs fortran...

SUSE-SU-2025:20896-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues: - CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232 - Disable LTO for userspace livepatching jscPED-13245...

SUSE-SU-2025:20867-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232 - Disable LTO for userspace livepatching jscPED-13245...

PT-2024-20560

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.21.10 and 1.22.3 Description The issue allows for arbitrary code execution when building a Go module that contains CGO on Darwin, due to the usage of the -lto library flag in a "cgo LDFLAGS" directive with the Apple...