From 25e606dd64db47e01d80544285e352522dbed02d Mon Sep 17 00:00:00 2001 From: Tyler Langlois Date: Mon, 6 Oct 2025 10:16:46 -0600 Subject: [PATCH] binutils: fix CVE-2025-5244 --- .../tools/misc/binutils/CVE-2025-5244.diff | 13 +++++++++++++ pkgs/development/tools/misc/binutils/default.nix | 4 ++++ 2 files changed, 17 insertions(+) create mode 100644 pkgs/development/tools/misc/binutils/CVE-2025-5244.diff diff --git a/pkgs/development/tools/misc/binutils/CVE-2025-5244.diff b/pkgs/development/tools/misc/binutils/CVE-2025-5244.diff new file mode 100644 index 000000000000..947172f2866a --- /dev/null +++ b/pkgs/development/tools/misc/binutils/CVE-2025-5244.diff @@ -0,0 +1,13 @@ +Backported patch originally targeted against 2.45. +--- a/bfd/elflink.c ++++ b/bfd/elflink.c +@@ -14356,5 +14356,6 @@ elf_gc_sweep (bfd *abfd, struct bfd_link_info *info) + if (o->flags & SEC_GROUP) + { + asection *first = elf_next_in_group (o); +- o->gc_mark = first->gc_mark; ++ if (first != NULL) ++ o->gc_mark = first->gc_mark; + } + + if (o->gc_mark) diff --git a/pkgs/development/tools/misc/binutils/default.nix b/pkgs/development/tools/misc/binutils/default.nix index 04e311bf38a1..2e3941d17f51 100644 --- a/pkgs/development/tools/misc/binutils/default.nix +++ b/pkgs/development/tools/misc/binutils/default.nix @@ -118,6 +118,10 @@ stdenv.mkDerivation (finalAttrs: { ./avr-size.patch ./windres-locate-gcc.patch + + # Backported against CVE patched in the 2.45 series. See: + # https://nvd.nist.gov/vuln/detail/CVE-2025-5244 + ./CVE-2025-5244.diff ]; outputs = [