CVE-2025-1376: elfutils_project elfutils Improper Resource Shutdown or Release

Vulnerability summary

CVE-2025-1376 is a medium (CVSS 4.7) Improper Resource Shutdown or Release vulnerability in elfutils_project elfutils. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.1% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 17-02-2025
   PublishedVulnerability first disclosed.
2. 02-06-2026
   Last modifiedVulnerability information updated.

Description

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.

• CWE-404Improper Resource Shutdown or ReleaseThe product does not release or incorrectly releases a resource before it is made available for re-use.