Skip to content

CVE record · 2 sources

CVE-2026-74225

CVSS 7.1

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths…

Vendor: Canonical
Product: Ubuntu
CVSS: 7.1
Exposure class: Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

Ubuntu notice Ubuntu 10d ago

U-Boot vulnerabilities

USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled…

CVE-2026-74220 CVE-2026-74221 CVE-2026-74222+1 more Canonical
10

CVE NVD 29 Sep 2026

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths…

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6…

CVSS 7.1 CVE-2026-74225