Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Denx U‑Boot can crash or be hijacked by crafted ZFS data

CVE-2025-70290 · published 8 days ago
Summary

If your devices use Denx U‑Boot (versions before the 2026.04 release) and boot from a ZFS‑formatted storage, specially crafted disk data can cause the boot loader to miscalculate memory needs. This miscalculation can make the system crash or allow an attacker to run their own code during startup. Update U‑Boot to the latest version or avoid using ZFS with these older releases to stay safe.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Ubuntu:16.04:LTS canonical u-boot All versions
Ubuntu:18.04:LTS canonical u-boot All versions
Ubuntu:20.04:LTS canonical u-boot All versions
Ubuntu:22.04:LTS canonical u-boot All versions
Ubuntu:22.04:LTS canonical u-boot-nezha All versions
Ubuntu:24.04:LTS canonical u-boot All versions
Ubuntu:24.04:LTS canonical u-boot-nezha All versions
Ubuntu:26.04:LTS canonical u-boot All versions
Original advisory text
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorr...
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (OSV)
Exploitation
EPSS <1%
Type
CWE-190Integer Overflow
CWE-787Out-of-bounds Write
Timeline
Published26 Aug 2026
Updated3 Sep 2026
First seen26 Aug 2026
Sources
CVE-2025-70290 · NVD
CVE-2025-70290 · MITRE
UBUNTU-CVE-2025-70290 · OSV
Monitor software like this
Free during beta