U-Boot — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Multiple CVEs Identified in Das U-Boot NFS Handler Vulnerabilities

  Eleven Common Vulnerabilities and Exposures (CVEs) have been identified in Das U-Boot, specifically affecting the NFS handler functions. These vulnerabilities, which include stack-based buffer overflows and unbounded…

  12 articles · Updated February 18, 2026
• Critical U-Boot Vulnerabilities Affect Ubuntu 24.04 LTS

  Ubuntu 24.04 LTS and its derivatives are affected by critical vulnerabilities in U-Boot, a boot loader for embedded systems. An attacker on the local network could exploit these issues to obtain sensitive memory…

  2 articles · Updated February 23, 2026
• Multiple CVEs Identified in Das U-Boot Affecting SquashFS and Ext4 Filesystems

  Six vulnerabilities have been identified in Das U-Boot, affecting its handling of squashfs and ext4 filesystems. These include integer overflows and stack consumption issues that could lead to memory overwrites and…

  9 articles · Updated February 18, 2026

Recent Intelligence Reports

• Ubuntu 24.04 LTS U-Boot Critical Denial of Service Threat USN-8056 — Linuxsecurity · February 23, 2026
• USN-8056-1: U — Ubuntu · February 23, 2026
• CVE-2022-33967 squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution. — Api.Msrc.Microsoft · February 18, 2026
• CVE-2019-14198 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case. — Api.Msrc.Microsoft · February 18, 2026

Related Entities