CVE-2025-11839: 
NixOS vulnerability analysis and mitigation

A security vulnerability (CVE-2025-11839) was discovered in GNU Binutils version 2.45, specifically affecting the tgtagtype function in the prdbg.c file. The vulnerability was disclosed on October 16, 2025, and involves an unchecked return value that could be exploited through local access (NVD, VulDB).

The vulnerability is classified with CWE-252 and CWE-253, both relating to unchecked return value issues. It has received a CVSS v4.0 score of 4.8 (Medium) with the vector string CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P, and a CVSS v3.1 score of 3.3 (Low) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L (NVD).

The vulnerability affects the availability of the system through improper handling of return values. The impact is considered low to medium, with no direct effect on confidentiality or integrity, but potential implications for system availability (NVD).

According to Red Hat's assessment, mitigation options are either not available or do not meet their Product Security criteria for ease of use, deployment, and stability. The vulnerability status is marked as 'Fix deferred' for various Red Hat Enterprise Linux versions (Red Hat).