Red Hat issued a security advisory (RHSA-2026:34924) for Red Hat Hardened Images RPMs that includes updated binutils packages (version 2.45.1-5.2.hum1) for aarch64 and x86_64 architectures. The update addresses CVE-2026-6845, a vulnerability classified under CWE-476 (NULL Pointer Dereference). The advisory lists the affected packages and architectures but does not explicitly state the affected versions prior to the update. No exploits are known in the wild. The update is available through Red Hat's public repositories and is intended to fix the vulnerability by upgrading to the specified package versions.

The vulnerability CVE-2026-6845 affects binutils packages in Red Hat Hardened Images, potentially causing issues related to NULL pointer dereference. While the exact impact details are not elaborated, such vulnerabilities can lead to application crashes or undefined behavior. There are no known exploits in the wild, indicating limited or no active exploitation at this time.

A security update is available from Red Hat that includes updated binutils packages (version 2.45.1-5.2.hum1) for the affected architectures. Users should apply this update to mitigate CVE-2026-6845. Refer to the official Red Hat advisory RHSA-2026:34924 and the Red Hat images repository for instructions on applying the update. No additional mitigation steps are indicated by the vendor.