Bug 2443833
| Summary: | CVE-2026-3441 CVE-2026-3442 gdb: various flaws [fedora-all] | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Michal Findra <mfindra> |
| Component: | gdb | Assignee: | Kevin Buettner <kevinb> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | aburgess, ahajkova, fweimer, guinevere, jan, keiths, kevinb, mcermak, mkolar, suraj.ghimire7 |
| Target Milestone: | --- | Keywords: | Security, SecurityTracking |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | {"flaws": ["e4f6c774-1266-4c4d-97f9-245bf49429dd", "d7a98fed-c9f7-4d26-a745-ee1cb2110c39"]} | ||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-03-09 15:17:38 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2443826, 2443828 | ||
|
Description
Michal Findra
2026-03-02 14:39:02 UTC
Both of the issues here are in the function xcoff_link_add_symbols in the file bfd/xcofflink.c. Here is an AI analysis of how this function is used, and whether it can be called from GDB:
1. xcoff_link_add_symbols is a static function in bfd/xcofflink.c called by _bfd_xcoff_bfd_link_add_symbols. That public function is installed in the XCOFF BFD target vectors (rs6000_xcoff_vec, powerpc_xcoff_vec, and the 64-bit variants in coff64-rs6000.c) via BFD_JUMP_TABLE_LINK(_bfd_xcoff).
2. The only way to invoke it is through the BFD dispatch macro:
#define bfd_link_add_symbols(abfd, info) \
BFD_SEND (abfd, _bfd_link_add_symbols, (abfd, info))
This is a linker API — it's how the linker (ld) tells BFD to add symbols from an input object/archive into the link hash table during a link operation.
3. GDB never calls bfd_link_add_symbols: A search of the entire gdb/, gdbserver/, and gdbsupport/ trees finds zero calls to bfd_link_add_symbols or direct references to the _bfd_link_add_symbols function pointer.
4. GDB does use struct bfd_link_info in one place — gdb/compile/compile-object-load.c — but only to call bfd_get_relocated_section_contents for relocating compiled-in expressions. It never calls bfd_link_add_symbols in that code path either.
This aligns with what I was expecting given what the function does. I've then gone and confirmed all of these details by hand and I believe that this analysis is correct, GDB doesn't make use of xcoff_link_add_symbols, and so this issue does not impact GDB.
|