GNU Binutils Memory Corruption Vulnerability in ld Component

A critical memory corruption vulnerability has been identified in GNU Binutils versions through 2.43. This issue arises in the ld component, specifically within the _bfd_elf_gc_mark_rsec function in bfd/elflink.c. The vulnerability can be exploited remotely, although the attack's complexity is considered high, making successful exploitation difficult.

Impact

Exploitation of this vulnerability could lead to memory corruption, with potential consequences including the disclosure of sensitive information, unauthorized data modification, or a denial-of-service condition.

Remediation

Users are advised to apply the patch identified by the commit hash 931494c9a89558acb36a03a340c01726545eef24 to address this vulnerability.