This vulnerability affects GNU Binutils version 2.47 specifically in the elf_link_add_object_symbols function of the bfd/elflink.c source file. A local attacker can trigger a null pointer dereference by manipulating the function's execution, potentially causing a crash or denial of service. The issue was reported early to the project, but no official fix or advisory has been published. Exploit code has been made public, increasing the risk of exploitation in local attack scenarios.

The vulnerability allows a local attacker to cause a null pointer dereference in GNU Binutils 2.47, which can result in a denial of service or application crash. There is no indication of privilege escalation or remote exploitation. The availability of public exploit code increases the likelihood of local attacks causing disruption.

No official patch or vendor advisory is currently available. Users should monitor the GNU Binutils project for updates and consider restricting local access to trusted users only until a fix is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.