USN-8056-1: U-Boot vulnerabilities

Simon Diepold discovered that U-Boot incorrectly handled certain DHCP responses. An attacker on the local network could possibly use this issue to obtain sensitive memory contents. CVE-2024-42040 It was discovered that U-Boot incorrectly handled symlink size calculations in squashfs file systems...

The vulnerability of the fs/squashfs component in Linux operating systems allows attackers to gain access to confidential data and cause service interruptions.

The vulnerability of the fs/squashfs component in Linux operating systems relates to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...