https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:23:12.292131+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379186 EUVD-2026-379186 2026-10-04T08:23:12.295761+00:00 EUVD-2026-379186 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71971 fkie_cve-2026-71971 2026-10-04T08:23:12.295793+00:00

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the bootloader.

 https://cve.radiocsirt.org/vuln/ghsa-9gg4-qrm6-f795 GHSA-9gg4-qrm6-f795 2026-10-04T08:23:12.295825+00:00

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the bootloader.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-71971 msrc_CVE-2026-71971 — U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly 2026-10-04T08:23:12.295843+00:00 msrc_CVE-2026-71971 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71971 UBUNTU-CVE-2026-71971 2026-10-04T08:23:12.295859+00:00

Affected: Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot-nezha, Ubuntu:24.04:LTS: u-boot, Ubuntu:24.04:LTS: u-boot-nezha, Ubuntu:26.04:LTS: u-boot

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the bootloader.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3660 WID-SEC-W-2026-3660 — DENX U-Boot: Mehrere Schwachstellen 2026-10-04T08:23:12.295889+00:00

Ein Angreifer kann mehrere Schwachstellen in DENX U-Boot ausnutzen, um den Speicher zu beschädigen, Denial-of-Service-Zustände herbeizuführen oder andere, nicht näher spezifizierte Angriffe zu starten.