PT-2026-102493 · U-Boot · U-Boot

Mateusz Furdyna

·

CVE-2026-15390

·

Published

2026-09-29

·

Updated

2026-09-29

CVSS v4.0

9.0

Critical

VectorAV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.07
Description When configured with the CONFIG IP DEFRAG=y parameter, the software fails to clear the IP reassembly state after delivering a complete datagram. This allows an attacker capable of delivering fragmented IP traffic to execute arbitrary code by sending duplicated last-fragment IP packets.
Recommendations Update to version 2026.07. As a temporary mitigation, disable the CONFIG IP DEFRAG=y configuration parameter.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-459CWE-787

Related Identifiers

CVE-2026-15390

Affected Products

U-Boot