CVE-2025-5244

Name of the Vulnerable Software and Affected Versions GNU Binutils versions up to 2.44

Description A critical issue was found in GNU Binutils, affecting the elf gc sweep function of the ld component. This issue leads to memory corruption and can be exploited locally. The exploit has been disclosed publicly and may be used.

Recommendations For GNU Binutils versions up to 2.44, upgrade to version 2.45 to address this issue. As a temporary workaround, consider disabling the elf gc sweep function until a patch is available. Restrict access to the bfd/elflink.c file to minimize the risk of exploitation. Avoid using the affected ld component until the issue is resolved.