USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. (CVE-2026-74220, CVE-2026-74221) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain HTTP data storage failures in its lwIP implementation. An attacker could possibly use this issue to trigger a use-after-free, resulting in a denial of service. (CVE-2026-74222) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot did not properly validate certain DHCPv6 option lengths during network boot. An attacker could possibly use this issue to trigger out-of-bounds memory access, resulting in a denial of service. (CVE-2026-74225) Update Instructions: Run `sudo pro fix USN-8930-2` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: u-boot-amlogic - 2025.10-0ubuntu6 u-boot-amlogic-binaries - 2025.10-0ubuntu6 u-boot-asahi - 2025.10-0ubuntu6 u-boot-exynos - 2025.10-0ubuntu6 u-boot-exynos-binaries - 2025.10-0ubuntu6 u-boot-imx - 2025.10-0ubuntu6 u-boot-microchip - 2025.10-0ubuntu6 u-boot-mvebu - 2025.10-0ubuntu6 u-boot-omap - 2025.10-0ubuntu6 u-boot-qcom - 2025.10-0ubuntu6 u-boot-qemu - 2025.10-0ubuntu6 u-boot-rockchip - 2025.10-0ubuntu6 u-boot-rpi - 2025.10-0ubuntu6 u-boot-sifive - 2025.10-0ubuntu6 u-boot-sitara-binaries - 2025.10-0ubuntu6 u-boot-starfive - 2025.10-0ubuntu6 u-boot-stm32 - 2025.10-0ubuntu6 u-boot-sunxi - 2025.10-0ubuntu6 u-boot-tegra - 2025.10-0ubuntu6 u-boot-tools - 2025.10-0ubuntu6 No subscription required
Last supporting evidence check: 2026-10-23T10:43:59.459Z UTC
u-boot-amlogic 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-amlogic-binaries 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-asahi 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-exynos 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-exynos-binaries 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-imx 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-microchip 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-mvebu 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-omap 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-qcom 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-qemu 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-rockchip 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-rpi 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-sifive 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-sitara-binaries 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-starfive 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-stm32 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-sunxi 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-tegra 2025.10-0ubuntu6-2025.10-0ubuntu6
u-boot-tools 2025.10-0ubuntu6-2025.10-0ubuntu6