CVE catalog

CVE-2024-57256

U-Boot vulnerabilities

Severity: High · CVSS 7.1CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: Feb 18, 2025, 11:15:09 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.37% · Oct 25, 2026

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	u-boot	sid	`2025.01-3.2`	fixed
Debian	u-boot	forky	`2025.01-3.2`	fixed
Debian	u-boot	trixie	`2025.01-3+deb13u1`	fixed
Debian	u-boot	bookworm	`2023.01+dfsg-2+deb12u3`	fixed
Debian	u-boot	bookworm-security	`2023.01+dfsg-2+deb12u3`	fixed
Ubuntu	u-boot	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-amlogic	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-amlogic-binaries	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-asahi	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-exynos	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-exynos-binaries	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-imx	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-microchip	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-mvebu	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-omap	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-qcom	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-qemu	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-rockchip	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-rpi	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-sifive	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-sitara-binaries	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-starfive	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-stm32	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-sunxi	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-tegra	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Ubuntu	u-boot-tools	noble	`2025.10-0ubuntu0.24.04.2`	fixed
Suse	u-boot-rpiarm64	linux micro 6.0	`2023.04-2.1`	fixed
Suse	u-boot-rpiarm64	linux enterprise micro 5.3	`2021.10-150400.4.14.1`	fixed
Suse	u-boot-rpiarm64	linux enterprise micro 5.4	`2021.10-150400.4.14.1`	fixed
Suse	u-boot-rpiarm64	linux enterprise micro 5.5	`2021.10-150400.4.14.1`	fixed
Opensuse	u-boot-xilinxzynqmpgeneric	leap 15.6	`2020.01-150200.10.18.1`	fixed
Suse	u-boot-rpiarm64	linux enterprise micro 5.2	`2021.01-150300.7.24.1`	fixed
Suse	u-boot	linux enterprise module for basesystem 15 sp6	`2021.10-150600.11.3.1`	fixed
Suse	u-boot-rpiarm64	linux enterprise module for basesystem 15 sp6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-avnetultra96rev1	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-bananapim64	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-dragonboard410c	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-dragonboard820c	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-evb-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-firefly-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-geekbox	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-hikey	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-khadas-vim	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-khadas-vim2	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-libretech-ac	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-libretech-cc	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-ls1012afrdmqspi	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-mvebudb-88f3720	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-mvebudbarmada8k	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-mvebuespressobin-88f3720	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-mvebumcbin-88f8040	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-nanopia64	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-odroid-c2	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-odroid-c4	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-odroid-n2	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-orangepipc2	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-p2371-2180	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-p2771-0000-500	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-p3450-0000	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-pine64plus	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-pinebook	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-pinebook-pro-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-pineh64	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-pinephone	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-poplar	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rock-pi-4-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rock-pi-n10-rk3399pro	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rock64-rk3328	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rock960-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rockpro64-rk3399	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rpi3	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rpi4	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-rpiarm64	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-xilinxzynqmpvirt	leap 15.6	`2021.10-150600.11.3.1`	fixed
Opensuse	u-boot-xilinxzynqmpzcu102rev10	leap 15.6	`2021.10-150600.11.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	u-boot	source	sid	`2025.01-1`	not yet assigned	Not reported	[1098254]
Debian	u-boot	source	forky	`2025.01-1`	not yet assigned	Not reported	[1098254]
Debian	u-boot	source	trixie	`2025.01-1`	not yet assigned	Not reported	[1098254]
Debian	u-boot	source	bookworm	`2023.01+dfsg-2+deb12u2`	not yet assigned	Not reported	[1098254]
Ubuntu	u-boot	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-amlogic	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-amlogic-binaries	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-asahi	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-exynos	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-exynos-binaries	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-imx	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-microchip	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-mvebu	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-omap	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-qcom	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-qemu	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-rockchip	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-rpi	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-sifive	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-sitara-binaries	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-starfive	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-stm32	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-sunxi	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-tegra	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Ubuntu	u-boot-tools	deb	noble	`2025.10-0ubuntu0.24.04.2`	Not reported	Not reported	Not reported
Suse	u-boot-rpiarm64	rpm	linux micro 6.0	`2023.04-2.1`	Not reported	SUSE-SU-2025:20219-1	Not reported
Suse	u-boot-rpiarm64	rpm	linux enterprise micro 5.3	`2021.10-150400.4.14.1`	Not reported	SUSE-SU-2025:0763-1	Not reported
Suse	u-boot-rpiarm64	rpm	linux enterprise micro 5.4	`2021.10-150400.4.14.1`	Not reported	SUSE-SU-2025:0763-1	Not reported
Suse	u-boot-rpiarm64	rpm	linux enterprise micro 5.5	`2021.10-150400.4.14.1`	Not reported	SUSE-SU-2025:0763-1	Not reported
Opensuse	u-boot-xilinxzynqmpgeneric	rpm	leap 15.6	`2020.01-150200.10.18.1`	Not reported	SUSE-SU-2025:0755-1	Not reported
Suse	u-boot-rpiarm64	rpm	linux enterprise micro 5.2	`2021.01-150300.7.24.1`	Not reported	SUSE-SU-2025:0817-1	Not reported
Suse	u-boot	rpm	linux enterprise module for basesystem 15 sp6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Suse	u-boot-rpiarm64	rpm	linux enterprise module for basesystem 15 sp6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-avnetultra96rev1	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-bananapim64	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-dragonboard410c	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-dragonboard820c	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-evb-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-firefly-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-geekbox	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-hikey	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-khadas-vim	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-khadas-vim2	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-libretech-ac	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-libretech-cc	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-ls1012afrdmqspi	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-mvebudb-88f3720	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-mvebudbarmada8k	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-mvebuespressobin-88f3720	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-mvebumcbin-88f8040	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-nanopia64	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-odroid-c2	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-odroid-c4	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-odroid-n2	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-orangepipc2	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-p2371-2180	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-p2771-0000-500	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-p3450-0000	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-pine64plus	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-pinebook	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-pinebook-pro-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-pineh64	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-pinephone	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-poplar	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rock-pi-4-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rock-pi-n10-rk3399pro	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rock64-rk3328	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rock960-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rockpro64-rk3399	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rpi3	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rpi4	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-rpiarm64	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-xilinxzynqmpvirt	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported
Opensuse	u-boot-xilinxzynqmpzcu102rev10	rpm	leap 15.6	`2021.10-150600.11.3.1`	Not reported	SUSE-SU-2025:0989-1	Not reported

[Debian bug #1098254]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[u-boot-amlogic]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-mvebu]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-qcom]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-qemu]Fixed
Source package: [u-boot]
Details (4)
- 2023.01+dfsg-2+deb12u3 · all · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · all · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · all · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · all · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-rockchip]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-rpi]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-sunxi]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-tegra]Fixed
Source package: [u-boot]
Details (2)
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
[u-boot-tools]Fixed
Source package: [u-boot]
Details (4)
- 2023.01+dfsg-2+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · amd64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12
- 2023.01+dfsg-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 2023.01+dfsg-2+deb12u2
  usn · u-boot · debian · bookworm; usn · u-boot · debian · 12

[Debian 13 (Trixie)]

[u-boot-amlogic-binaries]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-asahi]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-mvebu]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-qcom]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-qemu]Fixed
Source package: [u-boot]
Details (2)
- 2025.01-3 · all · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
- 2025.01-3 · all · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-rockchip]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-rpi]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-sitara-binaries]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-sunxi]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-tegra]Fixed
Source package: [u-boot]
Details (1)
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
[u-boot-tools]Fixed
Source package: [u-boot]
Details (2)
- 2025.01-3 · amd64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13
- 2025.01-3 · arm64 · trixie
  Fixed · Fixed: 2025.01-1
  usn · u-boot · debian · 13

Observed: Oct 26, 2026, 11:18:41 PM UTC

References

[CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]