BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed the bug in estreesearch caused by an invalid boot loader inode. We have the following issues: kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMPT SMP CPU: 1 PID: 945 Comm: cat Not tainted...

Astra Linux – Vulnerability in u-boot

In Das U-Boot through 2022.07-rc5, an integer signedness error and resulting stack-based buffer overflow occur in the “i2c md” command, which allows for the corruption of the return address pointer of the doi2cmd function...

Astra Linux – Vulnerability in u-boot

A carefully crafted self-referential DOS partition table will cause all Das U-Boot versions up to 2019.07-rc4 to infinitely recur, causing the stack to grow indefinitely. This could lead to a system crash or the overwriting of other data...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: EXT4: Zeroing idisksize when initializing the bootloader inode If the bootloader inode has never been used before, the EXT4IOCSWAPBOOT inode will initialize it, including setting isize to 0. However, if the “never before used”...

dracut-112+suse.29.gc0c5e1d-1.1 on GA media (moderate)

dracut-112+suse.29.gc0c5e1d-1.1 on GA media Announcement ID: openSUSE-SU-2026:11504-1 Rating: moderate Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

CLSA-2026-1776731791 TuxCare security update for bl (1 CVE)

TuxCare rebuilt bl to address 1 CVE. Fixed in 1.1.2-tuxcare.1...

CLSA-2026-1772756021 TuxCare security update for bl (2 CVEs)

TuxCare rebuilt bl to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

Уязвимость загрузчика Windows Boot Loader операционных систем Windows, позволяющая нарушителю обойти существующие ограничения безопасности

Уязвимость загрузчика Windows Boot Loader операционных систем Windows связана с отсутствием необходимого этапа шифрования. Эксплуатация уязвимости может позволить нарушителю обойти существующие ограничения безопасности...

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability

...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

EUVD-2026-44315

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability

...

Windows Boot Loader Security Feature Bypass Vulnerability

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638: Missing Cryptographic Step

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

PT-2026-58673

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-29008

U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...

CVE-2026-29008

U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...