CVE-2025-1371: 
NixOS vulnerability analysis and mitigation

A vulnerability has been found in GNU elfutils 0.192 affecting the function handle_dynamic_symtab of the file readelf.c in the eu-read component. The vulnerability was discovered on February 7, 2025, and was assigned CVE-2025-1371. The issue leads to a null pointer dereference when processing specially crafted ELF files (Sourceware Bug).

The vulnerability occurs in the handle_dynamic_symtab function when using the -D and -a options with a specially crafted input file. The issue arises because the code doesn't properly check if gelf_getphdr returns NULL when processing program headers. This can lead to a null pointer dereference when attempting to access the p_type field of an invalid program header (Sourceware Bug).

The vulnerability can cause the eu-readelf program to crash due to a null pointer dereference when processing malformed ELF files. However, according to the GNU elfutils security policy, this is considered a regular bug rather than a security vulnerability since elfutils tools are typically run in short-lived, local, interactive, development contexts rather than remotely in production (Sourceware Bug).

The vulnerability requires local access to exploit, and a proof-of-concept exploit has been publicly disclosed. The attack requires providing a specially crafted ELF file to the eu-readelf tool (VulDB).

A patch has been released with commit ID b38e562a4c907e08171c76b8b2def8464d5a104a that fixes the issue by adding a check for NULL return value from gelf_getphdr. It is recommended to apply this patch to affected installations (Sourceware Bug).