CVE-2026-74221

Published: Set 30, 2026 Last Modified: Set 30, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH 8,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: high

Description

AI Translation Available

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader.

195

Signed to Unsigned Conversion Error

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity
Potential Impacts:
Unexpected State
Applicable Platforms
Languages: C, C++
View CWE Details
https://github.com/u-boot/u-boot
https://github.com/u-boot/u-boot
https://github.com/u-boot/u-boot/blob/v2026.07/net/nfs-comm…
https://github.com/u-boot/u-boot/blob/v2026.07/net/nfs-common.c#L643
https://github.com/u-boot/u-boot/commit/1c0aff3a5fbfeee7a89…
https://github.com/u-boot/u-boot/commit/1c0aff3a5fbfeee7a8948f624e0b8554e6e0d8fd
https://www.vulncheck.com/advisories/u-boot-before-2026.10-…
https://www.vulncheck.com/advisories/u-boot-before-2026.10-rc5-buffer-overflow-…