{"id":"USN-7423-2","summary":"binutils vulnerabilities","details":"USN-7423-1 fixed several vulnerabilities in GNU. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that GNU binutils incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause a crash or execute\n arbitrary code. (CVE-2025-0840)\n\n It was discovered that GNU binutils incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause a crash, expose\n sensitive information or execute arbitrary code.\n (CVE-2025-1153)\n\n It was discovered that ld in GNU binutils incorrectly handled certain\n files. An attacker could possibly use this issue to execute arbitrary\n code. (CVE-2025-1176)\n","modified":"2026-04-22T11:35:02.672152Z","published":"2025-04-29T16:27:49Z","related":["UBUNTU-CVE-2025-0840","UBUNTU-CVE-2025-1153","UBUNTU-CVE-2025-1176"],"upstream":["CVE-2025-0840","CVE-2025-1153","CVE-2025-1176","UBUNTU-CVE-2025-0840","UBUNTU-CVE-2025-1153","UBUNTU-CVE-2025-1176"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7423-2"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-0840"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-1153"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-1176"}],"affected":[{"package":{"name":"binutils","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm11?arch=source&distro=esm-infra/xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm11"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-aarch64-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-alpha-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-arm-linux-gnueabi"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-arm-linux-gnueabihf"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-hppa-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-hppa64-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-m68k-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-mips-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-mips64-linux-gnuabi64"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-mips64el-linux-gnuabi64"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-mipsel-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-multiarch"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-powerpc-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-powerpc-linux-gnuspe"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-powerpc64-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-powerpc64le-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-s390x-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-sh4-linux-gnu"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-source"},{"binary_version":"2.26.1-1ubuntu1~16.04.8+esm11","binary_name":"binutils-sparc64-linux-gnu"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:16.04:LTS","cves":[{"id":"CVE-2025-0840","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2025-1153","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"low","type":"Ubuntu"}]},{"id":"CVE-2025-1176","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7423-2.json"}},{"package":{"name":"binutils","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.9+esm4?arch=source&distro=esm-infra/bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.9+esm4"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-aarch64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-alpha-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-arm-linux-gnueabi"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-arm-linux-gnueabihf"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-common"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-for-build"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-for-host"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-hppa-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-hppa64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-i686-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-i686-kfreebsd-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-i686-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-ia64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-m68k-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mips-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mips64-linux-gnuabi64"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mips64-linux-gnuabin32"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mips64el-linux-gnuabi64"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mips64el-linux-gnuabin32"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsel-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa32r6-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa32r6el-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa64r6-linux-gnuabi64"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa64r6-linux-gnuabin32"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa64r6el-linux-gnuabi64"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-mipsisa64r6el-linux-gnuabin32"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-multiarch"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-powerpc-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-powerpc-linux-gnuspe"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-powerpc64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-powerpc64le-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-riscv64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-s390x-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-sh4-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-source"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-sparc64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-x86-64-kfreebsd-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-x86-64-linux-gnu"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"binutils-x86-64-linux-gnux32"},{"binary_version":"2.30-21ubuntu1~18.04.9+esm4","binary_name":"libbinutils"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"id":"CVE-2025-0840","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2025-1153","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"low","type":"Ubuntu"}]},{"id":"CVE-2025-1176","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7423-2.json"}}],"schema_version":"1.7.5"}