CVE-2026-71971

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc3

Description An out-of-bounds write occurs in the net defragment() function within net/net.c when CONFIG IP DEFRAG is enabled. Remote attackers can trigger this by sending a crafted IP fragment with a non-zero offset and the More-Fragments flag set during netboot, leading to adjacent memory corruption and a bootloader crash.

Recommendations Update to version 2026.10-rc3 or later. As a temporary mitigation, disable the CONFIG IP DEFRAG configuration.