USN-8930-2: U-Boot vulnerabilities

USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. (CVE-2026-74220, CVE-2026-74221) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain HTTP data storage failures in its lwIP implementation. An attacker…

Ubuntu Security Notices에서 읽기

2026. 10. 22. 오전 12:57, Ubuntu Security Notices에서 "USN-8930-2: U-Boot vulnerabilities"을(를) 게시했습니다 (유형: 취약점 권고). 관련 기술: Ubuntu, Linux. CVE: CVE-2026-74220, CVE-2026-74221.