[scarthgap,0/4] binutils: fix CVE-2025-1147, CVE-2025-8224, CVE-2026-15003, CVE-2026-18220

Message ID	20260812072822.22227-1-jaipaul.cheernam@est.tech
Headers	show Return-Path: <jaipaul.cheernam@est.tech> ip: 52.101.69.41, mailfrom: jaipaul.cheernam@est.tech) From: Jaipaul Cheernam <jaipaul.cheernam@est.tech> To: openembedded-core@lists.openembedded.org CC: Jaipaul Cheernam <jaipaul.cheernam@est.tech> Subject: [scarthgap][PATCH 0/4] binutils: fix CVE-2025-1147, CVE-2025-8224, CVE-2026-15003, CVE-2026-18220 Date: Wed, 12 Aug 2026 09:28:18 +0200 Message-ID: <20260812072822.22227-1-jaipaul.cheernam@est.tech> Content-Transfer-Encoding: quoted-printable Content-Type: text/plain MIME-Version: 1.0
Series	binutils: fix CVE-2025-1147, CVE-2025-8224, CVE-2026-15003, CVE-2026-18220 \| expand [scarthgap,0/4] binutils: fix CVE-2025-1147, CVE-2025-8224, CVE-2026-15003, CVE-2026-18220 [scarthgap,1/4] binutils: fix CVE-2025-1147 [scarthgap,2/4] binutils: fix CVE-2025-8224 [scarthgap,3/4] binutils: fix CVE-2026-15003 [scarthgap,4/4] binutils: fix CVE-2026-18220

Message ID

20260812072822.22227-1-jaipaul.cheernam@est.tech

Headers

From: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
To: openembedded-core@lists.openembedded.org
CC: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Subject: [scarthgap][PATCH 0/4] binutils: fix CVE-2025-1147, CVE-2025-8224,
 CVE-2026-15003, CVE-2026-18220
Date: Wed, 12 Aug 2026 09:28:18 +0200
Message-ID: <20260812072822.22227-1-jaipaul.cheernam@est.tech>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
 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
X-OriginatorOrg: est.tech
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 74836e88-d573-4cc9-aa5b-08def8434c16
X-MS-Exchange-CrossTenant-AuthSource: DU7PPF66507B2D7.EURP189.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 07:28:25.8137
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 qMBFWt4BEbCB+4dcPNySZNkvtFEmb9W5O+h0DKitNzrf7nkRpFSSpxp1QgXP8KkXVnALibn0hYWH2Y5Dmk2SrxXi3lDHUMJknmUBvH8VKvU=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BESP189MB3212
List-Id: <openembedded-core.lists.openembedded.org>
X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com
 [45.33.107.173] by
 aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for
 <openembedded-core@lists.openembedded.org>; Wed, 12 Aug 2026 07:28:33 -0000
X-Groupsio-URL: 
 https://lists.openembedded.org/g/openembedded-core/message/243247

Series

binutils: fix CVE-2025-1147, CVE-2025-8224, CVE-2026-15003, CVE-2026-18220 | expand

Message

Jaipaul Cheernam Aug. 12, 2026, 7:28 a.m. UTC

Backport four upstream fixes for binutils 2.42:

- CVE-2025-1147: nm segfault with --ifunc-chars=-- (PR 32556)
- CVE-2025-8224: abort in _bfd_doprnt due to shstrtabsize overflow (PR 32109)
- CVE-2026-15003: buffer overflow in xcoff_link_add_symbols (PR 34053)
- CVE-2026-18220: buffer overflow in elf32_dlx_relocate26

CVE-2025-8224 is adapted for 2.42 (uses _bfd_alloc_and_read instead of
_bfd_mmap_readonly_persistent). All other patches apply cleanly.

Test results:
  binutils-cross-testsuite 2.42 (x86_64-oe-linux):

  Before:
  binutils: 302 passed, 2 unexpected failures, 1 untested, 7 unsupported
  gas:      1871 passed, 4 unexpected failures, 2 unsupported
  ld:       1728 passed, 5 unexpected failures, 7 expected failures, 1 unresolved, 20 untested, 99 unsupported

  After:
  binutils: 304 passed, 2 unexpected failures, 1 untested, 7 unsupported
  gas:      1871 passed, 4 unexpected failures, 2 unsupported
  ld:       1728 passed, 5 unexpected failures, 7 expected failures, 1 unresolved, 20 untested, 99 unsupported

No regressions. +2 new passes from nm --ifunc-chars=-- tests (CVE-2025-1147).

Jaipaul Cheernam (4):
  binutils: fix CVE-2025-1147
  binutils: fix CVE-2025-8224
  binutils: fix CVE-2026-15003
  binutils: fix CVE-2026-18220

 .../binutils/binutils-2.42.inc                |   4 +
 .../binutils/binutils/CVE-2025-1147.patch     | 110 +++++
 .../binutils/binutils/CVE-2025-8224.patch     |  54 +++
 .../binutils/binutils/CVE-2026-15003.patch    | 400 ++++++++++++++++++
 .../binutils/binutils/CVE-2026-18220.patch    |  65 +++
 5 files changed, 633 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1147.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-8224.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch