Back Linuxsecurity

Ubuntu: GNU Binutils Important DoS Code Exec Issues USN-7899

Linuxsecurity •LinuxSecurity Advisories • December 1, 2025

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in GNU binutils. Software Description: - binutils: GNU assembler, linker and binary utilities Details: It was discovered that GNU binutils could be forced to perform an out- of-bounds read in certain instances. An attacker with local access to a system could possibly use this issue to cause a denial of service. (CVE-2025-11839, CVE-2025-11840) It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-8225) It was discovered that GNU binutils incorrectly handled certain inputs.

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 binutils 2.45-7ubuntu1.1 binutils-multiarch 2.45-7ubuntu1.1 Ubuntu 25.04 binutils 2.44-3ubuntu1.2 binutils-multiarch 2.44-3ubuntu1.2 Ubuntu 24.04 LTS binutils 2.42-4ubuntu2.7 binutils-multiarch 2.42-4ubuntu2.7 Ubuntu 22.04 LTS binutils 2.38-4ubuntu2.11 binutils-multiarch 2.38-4ubuntu2.11 Ubuntu 20.04 LTS binutils 2.34-6ubuntu1.11+esm1 Available with Ubuntu Pro binutils-multiarch 2.34-6ubuntu1.11+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS binutils 2.30-21ubuntu1~18.04.9+esm5 Available with Ubuntu Pro binutils-multiarch 2.30-21ubuntu1~18.04.9+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS binutils 2.26.1-1ubuntu1~16.04.8+esm13 Available with Ubuntu Pro binutils-multiarch 2.26.1-1ubuntu1~16.04.8+esm13 Available with Ubuntu Pro Ubuntu 14.04 LTS binutils 2.24-5ubuntu14.2+esm7 Available with Ubuntu Pro binutils-multiarch 2.24-5ubuntu14.2+esm7 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2025-0840, CVE-2025-1153, CVE-2025-1181, CVE-2025-1182, CVE-2025-11839, CVE-2025-11840, CVE-2025-3198, CVE-2025-5244, CVE-2025-5245, CVE-2025-7545, CVE-2025-8225

CVE-2025-0840, CVE-2025-1153, CVE-2025-1181, CVE-2025-1182,

CVE-2025-11839, CVE-2025-11840, CVE-2025-3198, CVE-2025-5244,

CVE-2025-5245, CVE-2025-7545, CVE-2025-8225

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in GNU Binutils Affecting Ubuntu Systems GNU binutils has been found to have multiple vulnerabilities that could allow local attackers to cause denial of service, crashes, or execute arbitrary code. The affected versions include Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and 20.04 LTS, with specific CVEs identified for each issue. The vulnerabilities are restricted to local execution, emphasizing the need for system access to exploit them. 3 sources 28

Extracted Entities

Ubuntu: GNU Binutils Important DoS Code Exec Issues USN-7899

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (11)