https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:38:01.573352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338629 EUVD-2026-338629 2026-10-08T05:38:01.619465+00:00 EUVD-2026-338629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34962 fkie_cve-2026-34962 2026-10-08T05:38:01.619510+00:00

barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directory entry length values are non-zero. Attackers can supply a malicious ext4 filesystem image with a crafted directory entry containing a direntlen value of 0 to cause an infinite loop during directory listing or path resolution, resulting in the boot process hanging indefinitely.

 https://cve.radiocsirt.org/vuln/ghsa-gh28-ww79-7h4v GHSA-gh28-ww79-7h4v 2026-10-08T05:38:01.619547+00:00

barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directory entry length values are non-zero. Attackers can supply a malicious ext4 filesystem image with a crafted directory entry containing a direntlen value of 0 to cause an infinite loop during directory listing or path resolution, resulting in the boot process hanging indefinitely.