RFC: Fix for CVE-2026-19548
Project / Subsystem
binutils / rfc
Date
2026-08-13
Proposer
Nick Clifton <nickc@redhat.com>
Source type
public_inbox
Consensus
Proposed
Sentiment
6/10
Technical tradeoffs
- • Storing a copy of the pointer vs. refactoring memory management for `symdefs`.
- • The proposed fix is simple but might not address the root cause identified by reviewers.
All attributes
- project
- binutils
- subsystem
- rfc
- patch_id
- —
- discussion_id
- 87zeyq4d2r.fsf@redhat.com
- source_type
- public_inbox
- title
- RFC: Fix for CVE-2026-19548
- headline
- RFC: Proposed fix for use-after-free bug in ld/ldmain.c
- tldr
- RFC proposes a fix for a use-after-free bug in GNU ld (CVE-2026-19548) by storing a copy of a pointer to avoid dereferencing a freed structure.
- proposer
- Nick Clifton <nickc@redhat.com>
- consensus
- Proposed
- outcome
- under_review
- sentiment_score
- 6
- technical_tradeoffs
-
- • Storing a copy of the pointer vs. refactoring memory management for `symdefs`.
- • The proposed fix is simple but might not address the root cause identified by reviewers.
- series_id
- —
- series_role
- standalone
- series_parts
- []
- tags
-
- • security
- • ld
- • bugfix
- • cve
- bugzilla_url
- —
- date
- 2026-08-13T00:00:00.000Z
RFC: Fix for CVE-2026-19548
Nick Clifton proposes a fix for a use-after-free vulnerability in the add_archive_element function within GNU ld (tracked as CVE-2026-19548). The suggested solution involves retaining a copy of the my_archive pointer to prevent dereferencing a bfd structure after it has been freed. This approach aims to simplify the fix while addressing the reported bug.