An issue was discovered in Denx U-Boot before 2026.04.

published 2026-08-26 2 mo ago modified 2026-10-26 13 d ago also EUVD-2025-210792

cvss: 9.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.8%; EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits: 0; none known

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy() which could lead to arbitrary code execution, a denial of service, or other unspecified impacts.

Patch / fix

distros 1

u-boot Ubuntu 22.04 LTS 2022.01+dfsg-2ubuntu2.8
u-boot Ubuntu 24.04 LTS 2025.10-0ubuntu0.24.04.3
u-boot Ubuntu 26.10 2025.10-0ubuntu5
u-boot Ubuntu 26.04 LTS 2025.10-0ubuntu2.1
u-boot Ubuntu Pro 18.04 LTS 2020.10+dfsg-1ubuntu0~18.04.3+esm1
u-boot Ubuntu Pro 20.04 LTS 2021.01+dfsg-3ubuntu0~20.04.6+esm1

ubuntu advisories UBUNTU-CVE-2025-70293

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: total
Assessed: 2 mo ago (2026-09-01)

Exploit prediction

0.78% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

Weakness

CWE-190 Integer Overflow or Wraparound
CWE-122 Heap-based Buffer Overflow

References

Sources

CVE List CVE-2025-70293
NVD CVE-2025-70293

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary