CVE-2024-57258

概要

参考情報

• source.denx.de/u-boot/u-boot/-/commit/0a10b49206a29b4aa2f80233a3e53ca0466bb0b3 · Patch
• source.denx.de/u-boot/u-boot/-/commit/8642b2178d2c4002c99a0b69a845a48f2ae2706f · Patch
• source.denx.de/u-boot/u-boot/-/commit/c17b2a05dd50a3ba437e6373093a0d6a359cdee0 · Patch
• openwall.com/lists/oss-security/2025/02/17/2 · Mailing List
• lists.debian.org/debian-lts-announce/2025/05/msg00001.html
• cert-portal.siemens.com/productcert/html/ssa-577017.html

u-boot のその他の脆弱性

• CVE-2026-29009緊急 9.8U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled…
• CVE-2026-29008高 7.5U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine() function (net/tcp.c) that allows a netw…
• CVE-2026-29007中 5.3U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enable…
• CVE-2026-46728高 8.8Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
• CVE-2025-24857高 7.6Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019…