CVE Explorer

CVE-2026-6844

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of ser

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6803caf6bd1e00b32ad8b40640c7810d5736c03d7b0f4b6993ebc108d0e4d6bf

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 19 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gcc-toolset-15-binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gcc-toolset-15-binutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"mingw-binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-14-binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Hardened Images","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"mingw-binutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-15-binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mingw-binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-14-gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-15-gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"rhcos","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/18

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gcc-toolset-14-binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/12

Affected products and versions

19 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/14

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/15

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-14-binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/6

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"mingw-binutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-15-binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mingw-binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/16

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-14-gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gcc-toolset-15-gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/10

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/18

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gcc-toolset-14-binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gdb","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"binutils","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/affected/12

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-400","description":"Uncontrolled Resource Consumption","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-6844"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/references/0

{"name":"RHBZ#2460016","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460016"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e69e83d429d3314983ae9327ff0685fa78d7bba6d5bd1b8f05ff39da861f0905 · sha256:4ff1c435dffca7e8… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer