Vulnerabilitas in software Das U-Boot

CVE ID

CVE-2026-15390

Publication date

29 Septembris 2026

Vendor

DENX Software Engineering

Product

Das U-Boot

Vulnerable versions

Ab 2009.08 usque ad 2026.07

Vulnerabilitas type (CWE)

Out-of-bounds write (CWE-787)

Report source

Report to CERT Polska

Description

CERT Polska reportum accepit de vulnerabilitate in software Das U-Boot a DENX Software Engineering et in coordinatione eius revelationis participavit.

Vulnerabilitas CVE-2026-15390: Das U-Boot cum parametro CONFIG_IP_DEFRAG=y non purgat statum reassembly IP post datagram completum tradendum. Impugnator qui trafficum IP fragmentatum tradere potest, codicem arbitrarium exsequi potest mittendo duplicata packet IP ultimi fragmenti.

Haec quaestio in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa, inclusa in versione dimissa 2026.07, correcta est.

Credits

Gratias agimus Mateusz Furdyna ex Nokia pro responsabili relatione vulnerabilitatis.

Plura de processu revelationis vulnerabilitatis coordinatae apud CERT Polska inveniuntur ad https://cert.pl/en/cvd/.

Vulnerabilitates Relatae

CVE-2026-15390 CVSS 9 CRITICAL Awaiting Analysis

CVE-2026-15390 - Out-of-bounds write in Das U-Boot

Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.

Vulnerabilitas in software Das U-Boot

Vulnerabilitates Relatae

Plura ex cert.pl