PT-2026-81205

CVE-2026-71971

Published

2026-08-25

Updated

2026-10-06

Description by

CVSS 4.0

8.8

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc3

Description An out-of-bounds write occurs in the net defragment() function within net/net.c when CONFIG IP DEFRAG is enabled. Remote attackers can trigger this by sending a crafted IP fragment with a non-zero offset and the More-Fragments flag set during netboot, leading to adjacent memory corruption and a bootloader crash.

Recommendations Update to version 2026.10-rc3 or later. As a temporary mitigation, disable the CONFIG IP DEFRAG configuration.

Exploitability

Exploit

Fix

Impacts

Researchers

Shahriyar Jalayeri

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers