{"id":"ubuntu-usn-4f14e37966c6","seq":1259823,"kind":"advisory","title":"USN-8930-2: U-Boot vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8930-2","permalink":"https://vulnpulse.app/items/ubuntu-usn-4f14e37966c6","summary":"USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. (CVE-2026-74220, CVE-2026-74221) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain HTTP data storage failures in its lwIP implementation. An attacker…","severity":null,"techs":["ubuntu","linux"],"cves":["CVE-2026-74220","CVE-2026-74221"],"tags":["security"],"source":{"id":"ubuntu-usn","name":"Ubuntu Security Notices"},"published_at":"2026-10-21T15:57:11.000Z","fetched_at":"2026-10-26T07:39:16.676Z"}