Product

U-Boot (Through 2026.04-Rc3)

1 brief RSS

CVE-2026-29008: U-Boot Integer Underflow Leads to Bootloader Crash

An integer underflow vulnerability (CVE-2026-29008) in U-Boot's `tcp_rx_state_machine()` function allows a network-adjacent attacker to crash the bootloader by sending a crafted TCP SYN+ACK packet, potentially preventing device boot and leading to memory corruption.

U-Boot denial-of-service vulnerability bootloader network embedded-systems

1t 1c 47m ago