NULL pointer dereference in Binutils - CVE-2025-8224

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU114360

NULL pointer dereference in Binutils - CVE-2025-8224

Published: August 22, 2025


Vulnerability identifier: #VU114360
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-8224
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the bfd_elf_get_str_section() function in bfd/elf.c. A local user can perform a denial of service (DoS) attack.


Affected software

Binutils
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 15 SP3
SUSE Manager Retail Branch Server 4.3
SUSE Linux Enterprise Server 15 SP4
SUSE Manager Proxy 4.3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE Package Hub 15
Basesystem Module
Development Tools Module
openSUSE Leap
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Fedora
libucs0-64bit-debuginfo
openucx-tools-debuginfo
libucm-devel
openucx-debugsource
libuct0
libucs-devel
libuct0-debuginfo
libucp-devel
libucm0-debuginfo
libucs0-debuginfo
libucm0
libuct0-64bit
libucp0-debuginfo
libuct-devel
libucp0-64bit-debuginfo
libucp0-64bit
libucp0
libucm0-64bit-debuginfo
libucs0
libucs0-64bit
libucm0-64bit
libuct0-64bit-debuginfo
openucx-tools
openucx-debuginfo
binutils
cross-hppa-binutils
cross-rx-binutils-debuginfo
cross-epiphany-binutils
cross-spu-binutils
cross-hppa-binutils-debuginfo
cross-rx-binutils-debugsource
cross-ia64-binutils
cross-spu-binutils-debugsource
cross-ppc-binutils
cross-sparc64-binutils
libctf-nobfd0
cross-m68k-binutils-debugsource
cross-epiphany-binutils-debugsource
binutils-devel
cross-ppc-binutils-debuginfo
cross-riscv64-binutils
libctf0
cross-s390-binutils-debuginfo
binutils-debugsource
cross-hppa64-binutils
cross-m68k-binutils-debuginfo
cross-s390-binutils-debugsource
cross-riscv64-binutils-debugsource
binutils-devel-32bit
cross-sparc64-binutils-debuginfo
cross-avr-binutils-debuginfo
cross-ia64-binutils-debugsource
cross-ia64-binutils-debuginfo
cross-arm-binutils-debugsource
cross-spu-binutils-debuginfo
cross-bpf-binutils-debugsource
libctf0-debuginfo
cross-sparc-binutils-debuginfo
cross-hppa64-binutils-debuginfo
cross-ppc-binutils-debugsource
cross-ppc64-binutils
cross-mips-binutils-debuginfo
cross-m68k-binutils
cross-riscv64-binutils-debuginfo
cross-sparc64-binutils-debugsource
cross-pru-binutils-debugsource
cross-bpf-binutils-debuginfo
cross-arm-binutils
cross-arm-binutils-debuginfo
cross-pru-binutils
cross-aarch64-binutils-debugsource
cross-avr-binutils-debugsource
cross-sparc-binutils-debugsource
cross-mips-binutils
cross-hppa-binutils-debugsource
cross-s390x-binutils
cross-avr-binutils
cross-aarch64-binutils-debuginfo
cross-aarch64-binutils
cross-ppc64-binutils-debuginfo
cross-ppc64le-binutils-debugsource
cross-ppc64le-binutils
cross-ppc64le-binutils-debuginfo
cross-s390x-binutils-debuginfo
cross-x86_64-binutils-debugsource
cross-x86_64-binutils
cross-x86_64-binutils-debuginfo
cross-s390x-binutils-debugsource
cross-xtensa-binutils-debuginfo
cross-mips-binutils-debugsource
cross-i386-binutils-debuginfo
cross-sparc-binutils
binutils-debuginfo
cross-hppa64-binutils-debugsource
cross-pru-binutils-debuginfo
cross-s390-binutils
cross-i386-binutils
cross-xtensa-binutils
cross-xtensa-binutils-debugsource
cross-ppc64-binutils-debugsource
cross-epiphany-binutils-debuginfo
cross-rx-binutils
cross-bpf-binutils
libctf-nobfd0-debuginfo
cross-i386-binutils-debugsource
gprofng-debuginfo
gprofng
perf-debugsource
perf
perf-debuginfo
perf-devel
perf-gtk
perf-gtk-debuginfo
perf-bash-completion
bpftool-bash-completion
bpftool
bpftool-debugsource
bpftool-debuginfo

How to mitigate CVE-2025-8224

Install update from vendor's website.

Binutils - update to 2.45
libucs0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-tools-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debugsource - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libuct-devel - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucp0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucp0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucm0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucs0 - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
libucs0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libucm0-64bit - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
libuct0-64bit-debuginfo - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1
openucx-tools - addressed in versions 1.9.0-150300.4.2.5, 1.11.1-150400.4.2.1, 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
openucx-debuginfo - addressed in versions 1.13.1-150500.4.2.5, 1.15.0-150600.3.5.2, 1.17.0-150700.4.2.7
binutils - update to 2.44-6.fc42
cross-hppa-binutils - update to 2.45-150100.7.57.1
cross-rx-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-epiphany-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils - update to 2.45-150100.7.57.1
cross-spu-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc-binutils - update to 2.45-150100.7.57.1
cross-sparc64-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-m68k-binutils-debugsource - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debugsource - update to 2.45-150100.7.57.1
binutils-devel - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-ppc-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-riscv64-binutils - update to 2.45-150100.7.57.1
libctf0 - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-s390-binutils-debuginfo - update to 2.45-150100.7.57.1
binutils-debugsource - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils - update to 2.45-150100.7.57.1
cross-m68k-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils-debugsource - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debugsource - update to 2.45-150100.7.57.1
binutils-devel-32bit - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-avr-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ia64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ia64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils-debugsource - update to 2.45-150100.7.57.1
cross-spu-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-bpf-binutils-debugsource - update to 2.45-150100.7.57.1
libctf0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-sparc-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-hppa64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils - update to 2.45-150100.7.57.1
cross-mips-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-m68k-binutils - update to 2.45-150100.7.57.1
cross-riscv64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debugsource - update to 2.45-150100.7.57.1
cross-bpf-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-arm-binutils - update to 2.45-150100.7.57.1
cross-arm-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-pru-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-avr-binutils-debugsource - update to 2.45-150100.7.57.1
cross-sparc-binutils-debugsource - update to 2.45-150100.7.57.1
cross-mips-binutils - update to 2.45-150100.7.57.1
cross-hppa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-s390x-binutils - update to 2.45-150100.7.57.1
cross-avr-binutils - update to 2.45-150100.7.57.1
cross-aarch64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-aarch64-binutils - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64le-binutils - update to 2.45-150100.7.57.1
cross-ppc64le-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390x-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-x86_64-binutils - update to 2.45-150100.7.57.1
cross-x86_64-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390x-binutils-debugsource - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-mips-binutils-debugsource - update to 2.45-150100.7.57.1
cross-i386-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-sparc-binutils - update to 2.45-150100.7.57.1
binutils-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-hppa64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-pru-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-s390-binutils - update to 2.45-150100.7.57.1
cross-i386-binutils - update to 2.45-150100.7.57.1
cross-xtensa-binutils - update to 2.45-150100.7.57.1
cross-xtensa-binutils-debugsource - update to 2.45-150100.7.57.1
cross-ppc64-binutils-debugsource - update to 2.45-150100.7.57.1
cross-epiphany-binutils-debuginfo - update to 2.45-150100.7.57.1
cross-rx-binutils - update to 2.45-150100.7.57.1
cross-bpf-binutils - update to 2.45-150100.7.57.1
libctf-nobfd0-debuginfo - addressed in versions 2.45-150100.7.57.1, 2.45-160000.1.1
cross-i386-binutils-debugsource - update to 2.45-150100.7.57.1
gprofng-debuginfo - update to 2.45-160000.1.1
gprofng - update to 2.45-160000.1.1
perf-debugsource - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-debuginfo - addressed in versions 5.3.18-150300.38.7.1, 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-devel - addressed in versions 5.14.21-150400.44.20.1, 5.14.21-150500.52.5.1, 6.4.0.git33229.a3afe13a7f-150600.3.17.1, 6.4.0.git54263.0aad576b1c-150700.3.2.2
perf-gtk - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-gtk-debuginfo - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
perf-bash-completion - update to 6.4.0.git33229.a3afe13a7f-150600.3.17.1
bpftool-bash-completion - update to 7.5.0-160000.2.3
bpftool - update to 7.5.0-160000.2.3
bpftool-debugsource - update to 7.5.0-160000.2.3
bpftool-debuginfo - update to 7.5.0-160000.2.3

External References

Related Security Bulletins