CVE-2026-34962

CVE-2026-34962 affects barebox prior to 2026.04.0, where a vulnerability in ext4 directory parsing (fs/ext4/ext4_common.c) allows an infinite loop during directory listing or path resolution. The root cause is that ext4fs_iterate_dir() does not validate non-zero directory entry lengths, so a craf...

PT-2026-39851

Name of the Vulnerable Software and Affected Versions barebox versions prior to 2026.04.0 Description A denial-of-service issue exists in the ext4 directory parsing within fs/ext4/ext4 common.c. The ext4fs iterate dir function does not validate that directory entry length values are non-zero. An...