USN-8884-1: U-Boot vulnerabilities
Ubuntu patches U-Boot flaws where crafted ZFS or ext4 metadata can cause code execution or denial of service.
Ubuntu published USN-8884-1 for U-Boot vulnerabilities found by Timo Preißl. CVE-2025-70290 is an integer overflow in handling malformed ZFS filesystem metadata that can lead to out-of-bounds memory access, arbitrary code execution, or denial of service. A second issue miscalculates buffer sizes for certain ext4 filesystems with the same impact, affecting Ubuntu 18.04 LTS through 26.04 LTS. The notice does not report active exploitation.
- USN-8884-1 covers U-Boot integer overflows from malformed filesystem metadata.
- CVE-2025-70290: crafted ZFS metadata can cause out-of-bounds access, code execution, or denial of service.
- A separate ext4 buffer-size bug has the same impact on several Ubuntu LTS releases.
- No exploitation in the wild is reported in the notice.
Vulnerabilities mentionedAll →
- CVE-2025-702909.8<1%An issue was discovered in Denx U-Boot before 2026.04published
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2025-70290 | An issue was discovered in Denx U-Boot before 2026.04 An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process. NVD description · AI analysis pending |
Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. (CVE-2025-70290) Timo Preißl discovered that U-Boot incorrectly calculated buffer sizes when processing certain ext4 file systems. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.…
This source does not provide full text. Read it at ubuntu.com.