CVE-2025-11083: 
NixOS vulnerability analysis and mitigation

A vulnerability has been discovered in GNU Binutils version 2.45, specifically in the elf_swap_shdr function within the bfd/elfcode.h library of the Linker component. The vulnerability was disclosed on September 27, 2025, and received initial analysis from NIST on October 3, 2025 (NVD).

The vulnerability is classified as a heap-based buffer overflow (CWE-122) and improper restriction of operations within memory buffer bounds (CWE-119). According to the NVD assessment, it has received a CVSS v3.1 base score of 7.8 (HIGH), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability requires local access and low attack complexity, with low privileges required and no user interaction needed (NVD).

The vulnerability can lead to a total loss of confidentiality, integrity, and availability of the affected system. This includes potential disclosure of all resources within the impacted component to the attacker, ability to modify protected files, and possibility of complete denial of access to resources (NVD).

A patch has been identified with the identifier 9ca499644a21ceb3f946d1c179c38a83be084490, and the issue will be fixed in GNU Binutils version 2.46. The code maintainer has confirmed that the fix will be included in version 2.46 (NVD).