CVE-2026-74225

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5

Description An out-of-bounds memory access exists in the dhcp6 parse options() function. The issue occurs because the system fails to validate the lengths of the SERVERID and CLIENTID options within DHCPv6 packets. An attacker on the local network can exploit this by sending specially crafted DHCPv6 ADVERTISE or REPLY packets during the netboot process to corrupt memory and cause the bootloader to crash.

Recommendations Update to version 2026.10-rc5 or later.