U-Boot vulnerabilities affect Ubuntu 24.04 and 26.04 LTS
Key Takeaway
Three vulnerabilities in U-Boot could allow for denial of service or arbitrary code execution via NFS, HTTP, or DHCPv6.
Summary
Security researchers discovered multiple vulnerabilities in the U-Boot bootloader affecting Ubuntu 24.04 LTS and 26.04 LTS. These flaws involve incorrect handling of NFS responses, HTTP data storage failures in the lwIP implementation, and improper DHCPv6 option length validation. Exploitation could lead to buffer overflows, use-after-free errors, or out-of-bounds memory access.
Technical details of the U-Boot flaws
- CVE-2026-74220 and CVE-2026-74221: Incorrect handling of certain NFS READ and NFS READLINK responses can trigger a buffer overflow, potentially leading to denial of service or arbitrary code execution.
- CVE-2026-74222: Failures in HTTP data storage within the lwIP implementation can cause a use-after-free error, resulting in denial of service.
- CVE-2026-74225: Improper validation of DHCPv6 option lengths during network boot can lead to out-of-bounds memory access.
Why it matters
Users of Ubuntu LTS versions relying on U-Boot for network booting or specific storage protocols are at risk of system instability or compromise.
Original reference: ubuntu.com →