Skip to content
OpenAdvisories

Vendor

DENX Software Engineering

2 known vulnerabilities.

Products

U-Boot 1 Das U-Boot 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-15390

    Out-of-bounds write in Das U-Boot

    Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was f…

    DENX Software Engineering Das U-Boot qemu u-boot Debian Ubuntu Azure Linux