Vulnerability-Lookup

UBUNTU-CVE-2026-15390 (CVE-2026-15390)

Vulnerability from osv_ubuntu – Published: 2026-09-29 10:17 – Updated: 2026-10-17 09:38 – Source website

Details

Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.

Severity

9.0 (Critical)


                    
                      CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-15390	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-15390	REPORT
	https://cert.pl/en/posts/2026/09/CVE-2026-15390	REPORT
	https://source.denx.de/u-boot/u-boot/-/commit/b1a…	REPORT
	https://ubuntu.com/security/notices/USN-8884-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2016.01+dfsg1-2ubuntu5+esm1?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2016.01+dfsg1-2ubuntu5+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2015.04+dfsg1-2ubuntu1",
        "2015.10+dfsg1-2",
        "2015.10+dfsg1-3",
        "2015.10+dfsg1-4",
        "2016.01+dfsg1-1",
        "2016.01+dfsg1-1ubuntu1",
        "2016.01+dfsg1-2ubuntu1",
        "2016.01+dfsg1-2ubuntu2",
        "2016.01+dfsg1-2ubuntu3",
        "2016.01+dfsg1-2ubuntu5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2020.10+dfsg-1ubuntu0~18.04.3+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2016.03+dfsg1-6ubuntu2",
        "2018.07~rc3+dfsg1-0ubuntu1~18.04.1",
        "2018.07~rc3+dfsg1-0ubuntu2~18.04.1",
        "2018.07~rc3+dfsg1-0ubuntu3~18.04.1",
        "2019.07+dfsg-1ubuntu4~18.04.1",
        "2020.10+dfsg-1ubuntu0~18.04.2",
        "2020.10+dfsg-1ubuntu0~18.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2021.01+dfsg-3ubuntu0~20.04.6+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2019.07+dfsg-1ubuntu3",
        "2019.07+dfsg-1ubuntu5",
        "2019.07+dfsg-1ubuntu6",
        "2020.10+dfsg-1ubuntu0~20.04.2",
        "2021.01+dfsg-3ubuntu0~20.04.1",
        "2021.01+dfsg-3ubuntu0~20.04.3",
        "2021.01+dfsg-3ubuntu0~20.04.4",
        "2021.01+dfsg-3ubuntu0~20.04.5",
        "2021.01+dfsg-3ubuntu0~20.04.6"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2022.01+dfsg-2ubuntu2.8?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2022.01+dfsg-2ubuntu2.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2021.07+dfsg-0ubuntu8",
        "2021.07+dfsg-0ubuntu9",
        "2021.07+dfsg-0ubuntu10",
        "2022.01+dfsg-2ubuntu1",
        "2022.01+dfsg-2ubuntu2",
        "2022.01+dfsg-2ubuntu2.1",
        "2022.01+dfsg-2ubuntu2.3",
        "2022.01+dfsg-2ubuntu2.4",
        "2022.01+dfsg-2ubuntu2.5",
        "2022.01+dfsg-2ubuntu2.6",
        "2022.01+dfsg-2ubuntu2.7"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "u-boot-nezha",
            "binary_version": "2022.04+git20220405.7446a472-0ubuntu0.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "u-boot-nezha",
        "purl": "pkg:deb/ubuntu/u-boot-nezha@2022.04+git20220405.7446a472-0ubuntu0.4?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2021.09+git20211008.62392d3-0ubuntu1",
        "2022.04+git20220405.7446a472-0ubuntu0.1",
        "2022.04+git20220405.7446a472-0ubuntu0.2",
        "2022.04+git20220405.7446a472-0ubuntu0.3",
        "2022.04+git20220405.7446a472-0ubuntu0.4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-amlogic-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-asahi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-exynos-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sitara-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-starfive",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-stm32",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2025.10-0ubuntu0.24.04.3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.10-0ubuntu0.24.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2023.07+dfsg-1ubuntu2",
        "2024.01+dfsg-1ubuntu1",
        "2024.01+dfsg-1ubuntu2",
        "2024.01+dfsg-1ubuntu3",
        "2024.01+dfsg-1ubuntu4",
        "2024.01+dfsg-1ubuntu5",
        "2024.01+dfsg-1ubuntu5.1",
        "2024.01+dfsg-1ubuntu5.2",
        "2025.01-0ubuntu0.24.04.1",
        "2025.01-0ubuntu0.24.04.2",
        "2025.10-0ubuntu0.24.04.1",
        "2025.10-0ubuntu0.24.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "u-boot-nezha",
            "binary_version": "2024.01~rc1-190-g2e89b706f5-0ubuntu2.24.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "u-boot-nezha",
        "purl": "pkg:deb/ubuntu/u-boot-nezha@2024.01~rc1-190-g2e89b706f5-0ubuntu2.24.04.2?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2022.10-1089-g528ae9bc6c-0ubuntu2",
        "2024.01~rc1-190-g2e89b706f5-0ubuntu1",
        "2024.01~rc1-190-g2e89b706f5-0ubuntu2",
        "2024.01~rc1-190-g2e89b706f5-0ubuntu2.24.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-amlogic-binaries",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-asahi",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-exynos-binaries",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-sitara-binaries",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-starfive",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-stm32",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2025.10-0ubuntu5"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2025.10-0ubuntu5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2025.10-0ubuntu5?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.10-0ubuntu5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2025.10-0ubuntu2",
        "2025.10-0ubuntu3",
        "2025.10-0ubuntu4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-amlogic-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-asahi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-exynos-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sitara-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-starfive",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-stm32",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2025.10-0ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2025.10-0ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.10-0ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2025.01-3ubuntu4",
        "2025.10-0ubuntu1",
        "2025.10-0ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Das U-Boot\u00a0with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker\u00a0who can deliver fragmented IP traffic can\u00a0execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa\u00a0in\u00a0version 2026.07.",
  "id": "UBUNTU-CVE-2026-15390",
  "modified": "2026-10-17T09:38:02Z",
  "published": "2026-09-29T10:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-15390"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15390"
    },
    {
      "type": "REPORT",
      "url": "https://cert.pl/en/posts/2026/09/CVE-2026-15390"
    },
    {
      "type": "REPORT",
      "url": "https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8884-1"
    }
  ],
  "related": [
    "USN-8884-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-15390"
  ]
}

CVE-2026-15390 (GCVE-0-2026-15390)

Vulnerability from cvelistv5 – Published: 2026-09-29 10:04 – Updated: 2026-09-29 10:55 X_Open Source

Title

Out-of-bounds write in Das U-Boot

Summary

Severity

9 (Critical)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 10:53 UTC

CWE

CWE-787 - Out-of-bounds write
CWE-459 - Incomplete cleanup

Assigner

CERT-PL CNA under the ENISA root

CNA scorecard B 81/100 over 231 records in the last 180 days details

References

2 references

URL	Tags
https://cert.pl/en/posts/2026/09/CVE-2026-15390	third-party-advisory
https://source.denx.de/u-boot/u-boot/-/commit/b1a…	patch

Impacted products

1 product

Vendor	Product	Version
DENX Software Engineering	Das U-Boot	Affected: 2009.08 , ≤ 2026.07 (date)

Date Public

2026-09-29 00:00

Credits

Mateusz Furdyna, Nokia

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15390",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T10:53:14.845353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T10:55:43.070Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "__net_defragment()"
          ],
          "product": "Das U-Boot",
          "programFiles": [
            "net.c"
          ],
          "repo": "https://source.denx.de/u-boot/u-boot",
          "vendor": "DENX Software Engineering",
          "versions": [
            {
              "changes": [
                {
                  "at": "commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "2026.07",
              "status": "affected",
              "version": "2009.08",
              "versionType": "date"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mateusz Furdyna, Nokia"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Das U-Boot\u0026nbsp;with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker\u0026nbsp;who can deliver fragmented IP traffic can\u0026nbsp;execute arbitrary code by sending duplicated last-fragment IP packets.\u003cdiv\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThis issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa\u0026nbsp;in\u0026nbsp;version 2026.07.\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Das U-Boot\u00a0with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker\u00a0who can deliver fragmented IP traffic can\u00a0execute arbitrary code by sending duplicated last-fragment IP packets.\n\n\nThis issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa\u00a0in\u00a0version 2026.07."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-459",
              "description": "CWE-459 Incomplete cleanup",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-29T10:06:54.262Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/en/posts/2026/09/CVE-2026-15390"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "Out-of-bounds write in Das U-Boot",
      "x_generator": {
        "engine": "Vulnogram 1.0.3"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-15390",
    "datePublished": "2026-09-29T10:04:31.905Z",
    "dateReserved": "2026-07-10T11:51:31.347Z",
    "dateUpdated": "2026-09-29T10:55:43.070Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

USN-8884-1 (UBUNTU-CVE-2025-70290)

Vulnerability from osv_ubuntu – Published: 2026-10-06 16:09 – Updated: 2026-10-07 01:44 – Source website

Summary

u-boot vulnerabilities

Details

Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. (CVE-2025-70290)

Timo Preißl discovered that U-Boot incorrectly calculated buffer sizes when processing certain ext4 file systems. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2025-70293)

Mateusz Furdyna discovered that U-Boot incorrectly handled certain fragmented IP traffic when IP defragmentation was enabled. An attacker could possibly use this issue to corrupt memory by sending crafted IP fragments, resulting in arbitrary code execution. (CVE-2026-15390)

Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain fragmented IP traffic during network boot when IP defragmentation was enabled. An attacker could possibly use this issue to trigger an out-of-bounds write, resulting in a denial of service. (CVE-2026-71971)

References

URL

Type

	https://ubuntu.com/security/notices/USN-8884-1	ADVISORY
	https://ubuntu.com/security/CVE-2025-70290	REPORT
	https://ubuntu.com/security/CVE-2025-70293	REPORT
	https://ubuntu.com/security/CVE-2026-15390	REPORT
	https://ubuntu.com/security/CVE-2026-71971	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2016.01+dfsg1-2ubuntu5+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2016.01+dfsg1-2ubuntu5+esm1?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2016.01+dfsg1-2ubuntu5+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2015.04+dfsg1-2ubuntu1",
        "2015.10+dfsg1-2",
        "2015.10+dfsg1-3",
        "2015.10+dfsg1-4",
        "2016.01+dfsg1-1",
        "2016.01+dfsg1-1ubuntu1",
        "2016.01+dfsg1-2ubuntu1",
        "2016.01+dfsg1-2ubuntu2",
        "2016.01+dfsg1-2ubuntu3",
        "2016.01+dfsg1-2ubuntu5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-70293",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2020.10+dfsg-1ubuntu0~18.04.3+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2020.10+dfsg-1ubuntu0~18.04.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2016.03+dfsg1-6ubuntu2",
        "2018.07~rc3+dfsg1-0ubuntu1~18.04.1",
        "2018.07~rc3+dfsg1-0ubuntu2~18.04.1",
        "2018.07~rc3+dfsg1-0ubuntu3~18.04.1",
        "2019.07+dfsg-1ubuntu4~18.04.1",
        "2020.10+dfsg-1ubuntu0~18.04.2",
        "2020.10+dfsg-1ubuntu0~18.04.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-70293",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2021.01+dfsg-3ubuntu0~20.04.6+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2021.01+dfsg-3ubuntu0~20.04.6+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2019.07+dfsg-1ubuntu3",
        "2019.07+dfsg-1ubuntu5",
        "2019.07+dfsg-1ubuntu6",
        "2020.10+dfsg-1ubuntu0~20.04.2",
        "2021.01+dfsg-3ubuntu0~20.04.1",
        "2021.01+dfsg-3ubuntu0~20.04.3",
        "2021.01+dfsg-3ubuntu0~20.04.4",
        "2021.01+dfsg-3ubuntu0~20.04.5",
        "2021.01+dfsg-3ubuntu0~20.04.6"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-70293",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2022.01+dfsg-2ubuntu2.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2022.01+dfsg-2ubuntu2.8?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2022.01+dfsg-2ubuntu2.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2021.07+dfsg-0ubuntu8",
        "2021.07+dfsg-0ubuntu9",
        "2021.07+dfsg-0ubuntu10",
        "2022.01+dfsg-2ubuntu1",
        "2022.01+dfsg-2ubuntu2",
        "2022.01+dfsg-2ubuntu2.1",
        "2022.01+dfsg-2ubuntu2.3",
        "2022.01+dfsg-2ubuntu2.4",
        "2022.01+dfsg-2ubuntu2.5",
        "2022.01+dfsg-2ubuntu2.6",
        "2022.01+dfsg-2ubuntu2.7"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-70293",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-amlogic-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-asahi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-exynos-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sitara-binaries",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-starfive",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-stm32",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2025.10-0ubuntu0.24.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2025.10-0ubuntu0.24.04.3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.10-0ubuntu0.24.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2023.07+dfsg-1ubuntu2",
        "2024.01+dfsg-1ubuntu1",
        "2024.01+dfsg-1ubuntu2",
        "2024.01+dfsg-1ubuntu3",
        "2024.01+dfsg-1ubuntu4",
        "2024.01+dfsg-1ubuntu5",
        "2024.01+dfsg-1ubuntu5.1",
        "2024.01+dfsg-1ubuntu5.2",
        "2025.01-0ubuntu0.24.04.1",
        "2025.01-0ubuntu0.24.04.2",
        "2025.10-0ubuntu0.24.04.1",
        "2025.10-0ubuntu0.24.04.2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-70290",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-70293",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15390",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-71971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "u-boot-amlogic",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-amlogic-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-asahi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-exynos-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-microchip",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-mvebu",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-qcom",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-qemu",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sifive",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sitara-binaries",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-starfive",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-stm32",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2025.10-0ubuntu2.1"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2025.10-0ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2025.10-0ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.10-0ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2025.01-3ubuntu4",
        "2025.10-0ubuntu1",
        "2025.10-0ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Timo Prei\u00dfl discovered that U-Boot incorrectly handled certain malformed\nZFS file system metadata. An attacker could possibly use this issue to\ntrigger an integer overflow and out-of-bounds memory access, resulting in\narbitrary code execution or a denial of service. (CVE-2025-70290)\n\nTimo Prei\u00dfl discovered that U-Boot incorrectly calculated buffer sizes when\nprocessing certain ext4 file systems. An attacker could possibly use this\nissue to trigger an integer overflow and out-of-bounds memory access,\nresulting in arbitrary code execution or a denial of service. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2025-70293)\n\nMateusz Furdyna discovered that U-Boot incorrectly handled certain\nfragmented IP traffic when IP defragmentation was enabled. An attacker\ncould possibly use this issue to corrupt memory by sending crafted IP\nfragments, resulting in arbitrary code execution. (CVE-2026-15390)\n\nShahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly\nhandled certain fragmented IP traffic during network boot when IP\ndefragmentation was enabled. An attacker could possibly use this issue to\ntrigger an out-of-bounds write, resulting in a denial of service.\n(CVE-2026-71971)",
  "id": "USN-8884-1",
  "modified": "2026-10-07T01:44:48Z",
  "published": "2026-10-06T16:09:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8884-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-70290"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-70293"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-15390"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-71971"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "u-boot vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2025-70290",
    "UBUNTU-CVE-2025-70293",
    "UBUNTU-CVE-2026-15390",
    "UBUNTU-CVE-2026-71971"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2026-15390 (CVE-2026-15390)

CVE-2026-15390 (GCVE-0-2026-15390)

USN-8884-1 (UBUNTU-CVE-2025-70290)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour