UBUNTU-CVE-2026-19548

Source
https://ubuntu.com/security/CVE-2026-19548
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-19548
Upstream
  • CVE-2026-19548
Published
2026-08-13T00:00:00Z
Modified
2026-08-13T19:30:13.709418017Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that pluginmaybeclaim() in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry->thebfd->myarchive == NULL, but the caller retains both the original abfd parameter and a shallow copy (originput.thebfd) as dangling pointers. These dangling pointers are subsequently dereferenced at three distinct locations in addarchiveelement: 1. Line ~1442: accessing abfd->myarchive via bfdusrdata(abfd->myarchive) 2. Line ~1493: multiple accesses to abfd and abfd->myarchive in a conditional check and bfdgetfilename call 3. Line ~1525: dereferencing the shallow copy originput.thebfd->myarchive in trace/verbose logging The vulnerability is triggered when LTO plugins are active (linkinfo.ltopluginactive is true) and the input object has abfd->myarchive == NULL, which is a valid state for standalone object files. Red Hat builds binutils with --enable-plugins and --enable-lto, confirming the vulnerable code path is compiled in and reachable. An attacker who can supply a crafted object or archive file to a build process using LTO-enabled linking could exploit this flaw to cause a denial of service (linker crash via segmentation fault). Arbitrary code execution is theoretically possible through heap manipulation but is substantially mitigated by hardening measures including stack protector, FORTIFYSOURCE, ASLR, and PIE. The attack surface is limited to build-time environments — the linker is a development tool not exposed in production runtime. The most realistic exploitation scenario is a supply chain attack introducing a crafted object file as a build dependency in CI/CD pipelines or development environments.

References

Affected packages

Ubuntu:22.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.37-7ubuntu1
2.37-9ubuntu1
2.37-10ubuntu1
2.37.50.20220106-2ubuntu1
2.37.90.20220126-0ubuntu1
2.37.90.20220130-0ubuntu2
2.38-1ubuntu1
2.38-2ubuntu1
2.38-3ubuntu1
2.38-4ubuntu2
2.38-4ubuntu2.1
2.38-4ubuntu2.2
2.38-4ubuntu2.3
2.38-4ubuntu2.4
2.38-4ubuntu2.5
2.38-4ubuntu2.6
2.38-4ubuntu2.7
2.38-4ubuntu2.8
2.38-4ubuntu2.10
2.38-4ubuntu2.11
2.38-4ubuntu2.12

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-common"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-for-build"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-for-host"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-i686-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-i686-kfreebsd-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-i686-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-ia64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-riscv64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-sparc64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-x86-64-kfreebsd-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-x86-64-linux-gnu"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "binutils-x86-64-linux-gnux32"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "libbinutils"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "libctf-nobfd0"
        },
        {
            "binary_version": "2.38-4ubuntu2.12",
            "binary_name": "libctf0"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:24.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.41-5ubuntu1
2.41-6ubuntu1
2.41.50.20231206-1ubuntu1
2.41.50.20231214-1ubuntu1
2.41.50.20231227-1ubuntu1
2.41.90.20240122-1ubuntu1
2.42-2ubuntu1
2.42-3ubuntu1
2.42-4ubuntu1
2.42-4ubuntu2
2.42-4ubuntu2.3
2.42-4ubuntu2.4
2.42-4ubuntu2.5
2.42-4ubuntu2.6
2.42-4ubuntu2.7
2.42-4ubuntu2.8
2.42-4ubuntu2.10

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-arc-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-common"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-for-build"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-for-host"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-i686-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-i686-kfreebsd-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-i686-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-ia64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-loongarch64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-riscv64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-sparc64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-x86-64-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-x86-64-kfreebsd-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-x86-64-linux-gnu"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "binutils-x86-64-linux-gnux32"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "libbinutils"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "libctf-nobfd0"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "libctf0"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "libgprofng0"
        },
        {
            "binary_version": "2.42-4ubuntu2.10",
            "binary_name": "libsframe1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:26.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.45-7ubuntu1
2.45-7ubuntu2
2.45-8ubuntu1
2.45.50.20251125-1ubuntu1
2.45.50.20251201-1ubuntu1
2.45.50.20251209-1ubuntu1
2.45.50.20260119-1ubuntu1
2.46-1ubuntu1
2.46-2ubuntu1
2.46-3ubuntu1
2.46-3ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-arc-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-common"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-for-build"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-for-host"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-i686-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-i686-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-loongarch64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-riscv64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-sparc-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-sparc64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-x86-64-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-x86-64-linux-gnu"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "binutils-x86-64-linux-gnux32"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "libbinutils"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "libctf-nobfd0"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "libctf0"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "libgprofng0"
        },
        {
            "binary_version": "2.46-3ubuntu2",
            "binary_name": "libsframe3"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:Pro:14.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.23.52.20130913-0ubuntu1
2.23.90.20131017-1ubuntu1
2.23.90.20131116-1ubuntu1
2.23.91.20131123-1ubuntu1
2.24-1ubuntu1
2.24-1ubuntu2
2.24-2ubuntu1
2.24-2ubuntu2
2.24-2ubuntu3
2.24-4ubuntu1
2.24-5ubuntu1
2.24-5ubuntu2
2.24-5ubuntu3
2.24-5ubuntu3.1
2.24-5ubuntu13
2.24-5ubuntu14
2.24-5ubuntu14.1
2.24-5ubuntu14.2
2.24-5ubuntu14.2+esm1
2.24-5ubuntu14.2+esm2
2.24-5ubuntu14.2+esm3
2.24-5ubuntu14.2+esm5
2.24-5ubuntu14.2+esm6
2.24-5ubuntu14.2+esm7
2.24-5ubuntu14.2+esm8

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.24-5ubuntu14.2+esm8",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.24-5ubuntu14.2+esm8",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.24-5ubuntu14.2+esm8",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.24-5ubuntu14.2+esm8",
            "binary_name": "binutils-static"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:Pro:16.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=esm-infra%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.25.1-6ubuntu1
2.25.51.20151022-0ubuntu2
2.25.51.20151022-0ubuntu3
2.25.51.20151027-0ubuntu1
2.25.51.20151028-0ubuntu1
2.25.51.20151106-0ubuntu1
2.25.51.20151113-1ubuntu1
2.25.51.20151113-2ubuntu1
2.25.90.20151125-1ubuntu1
2.25.90.20151125-2ubuntu1
2.25.90.20151211-0ubuntu1
2.25.90.20151211-0ubuntu2
2.25.90.20160101-1ubuntu1
2.25.90.20160101-1ubuntu2
2.26-2ubuntu1
2.26-3ubuntu1
2.26-4ubuntu1
2.26-5ubuntu1
2.26-6ubuntu1
2.26-7ubuntu2
2.26-8ubuntu1
2.26-8ubuntu2
2.26-8ubuntu2.1
2.26.1-1ubuntu1~16.04
2.26.1-1ubuntu1~16.04.1
2.26.1-1ubuntu1~16.04.3
2.26.1-1ubuntu1~16.04.4
2.26.1-1ubuntu1~16.04.5
2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.7
2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm1
2.26.1-1ubuntu1~16.04.8+esm3
2.26.1-1ubuntu1~16.04.8+esm4
2.26.1-1ubuntu1~16.04.8+esm5
2.26.1-1ubuntu1~16.04.8+esm6
2.26.1-1ubuntu1~16.04.8+esm7
2.26.1-1ubuntu1~16.04.8+esm9
2.26.1-1ubuntu1~16.04.8+esm11
2.26.1-1ubuntu1~16.04.8+esm12
2.26.1-1ubuntu1~16.04.8+esm13
2.26.1-1ubuntu1~16.04.8+esm14

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-mips-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-mips64-linux-gnuabi64"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-mips64el-linux-gnuabi64"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-mipsel-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-powerpc-linux-gnuspe"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm14",
            "binary_name": "binutils-sparc64-linux-gnu"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:Pro:18.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.29.1-4ubuntu1
2.29.1-6ubuntu1
2.29.1-7ubuntu1
2.29.1-8ubuntu1
2.29.1-10ubuntu1
2.29.1-12ubuntu1
2.30-4ubuntu1
2.30-5ubuntu1
2.30-7ubuntu1
2.30-8ubuntu1
2.30-9ubuntu1
2.30-10ubuntu1
2.30-11ubuntu1
2.30-14ubuntu2
2.30-15ubuntu1
2.30-20ubuntu2~18.04
2.30-21ubuntu1~18.04
2.30-21ubuntu1~18.04.1
2.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.3
2.30-21ubuntu1~18.04.4
2.30-21ubuntu1~18.04.5
2.30-21ubuntu1~18.04.7
2.30-21ubuntu1~18.04.8
2.30-21ubuntu1~18.04.9
2.30-21ubuntu1~18.04.9+esm1
2.30-21ubuntu1~18.04.9+esm3
2.30-21ubuntu1~18.04.9+esm4
2.30-21ubuntu1~18.04.9+esm5
2.30-21ubuntu1~18.04.9+esm13

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-common"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-for-build"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-for-host"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-i686-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-i686-kfreebsd-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-i686-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-ia64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mips-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mips64-linux-gnuabi64"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mips64-linux-gnuabin32"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mips64el-linux-gnuabi64"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mips64el-linux-gnuabin32"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsel-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa32r6-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa32r6el-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-powerpc-linux-gnuspe"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-riscv64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-sparc64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-x86-64-kfreebsd-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-x86-64-linux-gnu"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "binutils-x86-64-linux-gnux32"
        },
        {
            "binary_version": "2.30-21ubuntu1~18.04.9+esm13",
            "binary_name": "libbinutils"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"
Ubuntu:Pro:20.04:LTS
binutils

Package

Name
binutils
Purl
pkg:deb/ubuntu/binutils?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.33-2ubuntu1
2.33.1-1ubuntu1
2.33.1-5ubuntu1
2.33.1-6ubuntu1
2.33.1-6ubuntu3
2.33.90.20200122-1ubuntu2
2.34-1ubuntu1
2.34-3ubuntu1
2.34-4ubuntu1
2.34-5ubuntu1
2.34-6ubuntu1
2.34-6ubuntu1.1
2.34-6ubuntu1.3
2.34-6ubuntu1.4
2.34-6ubuntu1.5
2.34-6ubuntu1.6
2.34-6ubuntu1.7
2.34-6ubuntu1.8
2.34-6ubuntu1.9
2.34-6ubuntu1.10
2.34-6ubuntu1.11
2.34-6ubuntu1.11+esm1
2.34-6ubuntu1.11+esm2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-aarch64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-alpha-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-arm-linux-gnueabi"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-arm-linux-gnueabihf"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-common"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-for-build"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-for-host"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-hppa-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-hppa64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-i686-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-i686-kfreebsd-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-i686-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-ia64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-m68k-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-multiarch"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-powerpc-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-powerpc64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-powerpc64le-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-riscv64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-s390x-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-sh4-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-source"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-sparc64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-x86-64-kfreebsd-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-x86-64-linux-gnu"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "binutils-x86-64-linux-gnux32"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "libbinutils"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "libctf-nobfd0"
        },
        {
            "binary_version": "2.34-6ubuntu1.11+esm2",
            "binary_name": "libctf0"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19548.json"