Hongxu Jia e3072d229a u-boot: fix CVE-2025-24857 ...

According to [1], Improper access control for volatile memory containing boot
code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019,
IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker
to execute arbitrary code.

Backport a patch [2] from upstream to fix CVE-2025-24857

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-24857
[2] https://source.denx.de/u-boot/u-boot/-/commit/87d85139a96a39429120cca838e739408ef971a2

(From OE-Core rev: 6f69c878896b536f5f7b16c566d420e188c82c7f)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-05-12 21:31:33 +01:00

..

files

u-boot: fix CVE-2025-24857

2026-05-12 21:31:33 +01:00

libubootenv_0.3.5.bb

libubootenv: upgrade 0.3.4 -> 0.3.5

2023-10-19 13:38:57 +01:00

u-boot_2024.01.bb

u-boot: move CVE patches out of the common .inc file

2026-02-27 17:45:07 +00:00

u-boot-common.inc

u-boot: fix CVE-2025-24857

2026-05-12 21:31:33 +01:00

u-boot-configure.inc

u-boot.inc: Refactor do_* steps into functions that can be overridden

2024-08-19 06:09:14 -07:00

u-boot-tools_2024.01.bb

u-boot: Upgrade to 2024.01

2024-01-10 17:01:28 +00:00

u-boot-tools.inc

u-boot-tools: Package mkeficapsule

2024-04-11 08:46:49 +01:00

u-boot.inc

uboot: Allow for customizing installed/deployed file names

2025-07-07 07:42:58 -07:00