High severity7.1NVD Advisory· Published Feb 18, 2025· Updated May 12, 2026

CVE-2024-57256

Description

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Denx/U Boot2 versions
cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*range: <=2024.10
- (no CPE)range: 0
U Boot/U Bootllm-fuzzy
Range: <2025.01-rc1
osv-coords50 versions
pkg:rpm/opensuse/u-boot-avnetultra96rev1&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-bananapim64&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-dragonboard410c&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-dragonboard820c&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-evb-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-firefly-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-geekbox&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-hikey&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-khadas-vim2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-khadas-vim&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-libretech-ac&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-libretech-cc&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-ls1012afrdmqspi&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-mvebudb-88f3720&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-mvebudbarmada8k&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-mvebuespressobin-88f3720&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-mvebumcbin-88f8040&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-nanopia64&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-odroid-c2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-odroid-c4&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-odroid-n2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-orangepipc2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-p2371-2180&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-p2771-0000-500&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-p3450-0000&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-pine64plus&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-pinebook&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-pinebook-pro-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-pineh64&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-pinephone&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-poplar&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rock64-rk3328&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rock960-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rock-pi-4-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rock-pi-n10-rk3399pro&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rockpro64-rk3399&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rpi3&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rpi4&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-rpiarm64&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-xilinxzynqmpgeneric&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-xilinxzynqmpvirt&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/u-boot-xilinxzynqmpzcu102rev10&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Micro%206.0
< 2021.10-150600.11.3.1+ 49 more
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2020.01-150200.10.18.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2021.01-150300.7.24.1
- (no CPE)range: < 2021.10-150400.4.14.1
- (no CPE)range: < 2021.10-150400.4.14.1
- (no CPE)range: < 2021.10-150400.4.14.1
- (no CPE)range: < 2021.10-150600.11.3.1
- (no CPE)range: < 2023.04-2.1

Patches

Vulnerability mechanics

References

source.denx.de/u-boot/u-boot/-/commit/35f75d2a46e5859138c83a75cd2f4141c5479ab9nvdPatch
www.openwall.com/lists/oss-security/2025/02/17/2nvdMailing ListMitigationThird Party Advisory
cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
lists.debian.org/debian-lts-announce/2025/05/msg00001.htmlnvd

News mentions

Siemens Ruggedcom Rox
CISA ICS Advisories

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000