A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two
    Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format
    (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition.
    The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in
    the `readelf` utility becoming unresponsive or crashing, leading to a denial of service. (CVE-2026-6844)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790167629 advisory.

  - A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two     Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format     (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition.
    The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in     the `readelf` utility becoming unresponsive or crashing, leading to a denial of service. (CVE-2026-6844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two     Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format     (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition.
    The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in     the `readelf` utility becoming unresponsive or crashing, leading to a denial of service. (CVE-2026-6844)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
458836	Echo: binutils: security update to 2.45.90.20260201+really2.45.50.20251201-1+e8	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458836	Echo: binutils: security update to 2.45.90.20260201+really2.45.50.20251201-1+e8	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
353213	AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.2:CLSA-2026:1790167629)	Nessus	Alma Linux Local Security Checks	Local	medium
309204	Linux Distros Unpatched Vulnerability : CVE-2026-6844	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-6844

medium

Tenable Plugins

medium

medium

medium

medium