Ubuntu 26.10 U-Boot update fixes NFS and HTTP flaws
Original title: USN-8930-2: U-Boot vulnerabilities
Malformed NFS responses can overflow buffers for denial of service or code execution; an lwIP HTTP bug can use-after-free.
Ubuntu published USN-8930-2 to provide U-Boot fixes from USN-8930-1 on Ubuntu 26.10. Shahriyar Jalayeri and Mehrun P. Hunter found that certain NFS READ and NFS READLINK responses can trigger a buffer overflow, possibly causing denial of service or arbitrary code execution. A separate HTTP storage-failure bug in U-Boot's lwIP implementation can trigger a use-after-free and denial of service. The snippet does not report exploitation.
Unconfirmed: The HTTP issue is cut off, and no CVE or exploitation status is given for it.
- CVE-2026-74220 and CVE-2026-74221 cover the NFS response issues.
- The NFS flaws can lead to a buffer overflow.
- The HTTP issue is a use-after-free in the lwIP implementation.
- USN-8930-1 previously fixed the same vulnerabilities.
Impact: Denial of service or arbitrary code execution
| Product | Affected |
|---|---|
| U-Boot | Ubuntu 26.10 |
- 1.Apply the U-Boot update for Ubuntu 26.10 from USN-8930-2.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-74220+1 related CVE | NFS reply buffer overflow in U-Boot before 2026.10-rc5 | 8.8 | — |
From the original article
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26. 10.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.