Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. (CVE-2026-74220, CVE-2026-74221) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain HTTP data storage failures in its lwIP implementation. An attacker could possibly use this issue to trigger a use-after-free, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-74222) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot did not properly validate certain DHCPv6 option lengths during network boot. An attacker could possibly use this issue to trigger out-of-bounds memory access, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-74225) Update Instructions: Run `sudo pro fix USN-8930-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: u-boot - 2022.01+dfsg-2ubuntu2.9 u-boot-amlogic - 2022.01+dfsg-2ubuntu2.9 u-boot-exynos - 2022.01+dfsg-2ubuntu2.9 u-boot-imx - 2022.01+dfsg-2ubuntu2.9 u-boot-microchip - 2022.01+dfsg-2ubuntu2.9 u-boot-mvebu - 2022.01+dfsg-2ubuntu2.9 u-boot-omap - 2022.01+dfsg-2ubuntu2.9 u-boot-qcom - 2022.01+dfsg-2ubuntu2.9 u-boot-qemu - 2022.01+dfsg-2ubuntu2.9 u-boot-rockchip - 2022.01+dfsg-2ubuntu2.9 u-boot-rpi - 2022.01+dfsg-2ubuntu2.9 u-boot-sifive - 2022.01+dfsg-2ubuntu2.9 u-boot-sunxi - 2022.01+dfsg-2ubuntu2.9 u-boot-tegra - 2022.01+dfsg-2ubuntu2.9 u-boot-tools - 2022.01+dfsg-2ubuntu2.9 No subscription required
Last supporting evidence check: 2026-10-21T12:36:11.136Z UTC
u-boot 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-amlogic 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-exynos 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-imx 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-microchip 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-mvebu 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-omap 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-qcom 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-qemu 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-rockchip 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-rpi 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-sifive 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-sunxi 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-tegra 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-tools 2022.01+dfsg-2ubuntu2.9-2022.01+dfsg-2ubuntu2.9
u-boot-amlogic 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-amlogic-binaries 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-asahi 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-exynos 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-exynos-binaries 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-imx 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-microchip 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-mvebu 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-omap 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-qcom 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-qemu 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-rockchip 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-rpi 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-sifive 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-sitara-binaries 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-starfive 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-stm32 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-sunxi 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-tegra 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-tools 2025.10-0ubuntu2.2-2025.10-0ubuntu2.2
u-boot-amlogic 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-amlogic-binaries 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-asahi 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-exynos 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-exynos-binaries 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-imx 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-microchip 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-mvebu 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-omap 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-qcom 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-qemu 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-rockchip 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-rpi 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-sifive 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-sitara-binaries 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-starfive 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-stm32 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-sunxi 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-tegra 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot-tools 2025.10-0ubuntu0.24.04.4-2025.10-0ubuntu0.24.04.4
u-boot 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-amlogic 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-exynos 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-imx 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-mvebu 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-omap 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-qcom 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-qemu 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-rockchip 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-rpi 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-sifive 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-sunxi 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-tegra 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2
u-boot-tools 2021.01+dfsg-3ubuntu0~20.04.6+esm2-2021.01+dfsg-3ubuntu0~20.04.6+esm2