critical9.8
CVE-2025-70290
An issue was discovered in Denx U-Boot before 2026.04.
Impact
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process.
Affected products
| Product | Affected versions |
|---|---|
| Denx U-Boot | before 2026.04. |
Versions were read from the advisory text. No structured product data has been published for this record yet.