DENX U-Boot: Mehrere Schwachstellen ermöglichen Codeausführung und DoS

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2025-70290

  An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support …

  u-boot u-boot u-boot-nezha Debian Ubuntu
  Aug 26, 2026
• Critical 9.8
  CVE-2025-70293

  An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_…

  u-boot u-boot u-boot-nezha Debian Ubuntu
  Aug 26, 2026

Revision history

1. 2026-10-06 #3

   Neue Updates von Ubuntu aufgenommen

2. 2026-08-30 #2

   CVE's ergänzt

3. 2026-08-26 #1

   Initiale Fassung

References

• Denx U-Boot Project vom 2026-08-26
  https://u-boot-project.org/
• GitHub Security Advisory GHSA-J2XX-GRH4-4P3Q vom 2026-08-26
  https://github.com/advisories/GHSA-J2XX-GRH4-4P3Q
• GitHub Security Advisory GHSA-jgm9-xpcw-hqh9 vom 2026-08-26
  https://github.com/advisories/GHSA-jgm9-xpcw-hqh9
• Ubuntu Security Notice USN-8884-1 vom 2026-10-06
  https://ubuntu.com/security/notices/USN-8884-1