CVE-2026-6845

Published: Apr 22, 2026Modified: Jul 13, 2026

5.0

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.3 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash.

Affected (8)

Products: Gnu: Binutils · Redhat: Enterprise Linux, Hardened Images, Openshift Container Platform

1 product

3 products

Openshift Container Platform

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	All versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Hardened Images	All versions
Redhat Openshift Container Platform	Version 4.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://access.redhat.com/errata/RHSA-2026:34924

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:39022

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-6845

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2460012

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.