vulnerability

Debian: CVE-2024-57257: u-boot -- security update

Severity

CVSS

(AV:L/AC:M/Au:N/C:N/I:N/A:P)

Published

Feb 18, 2025

Added

May 2, 2025

Modified

Mar 30, 2026

Description

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

debian-upgrade-u-boot

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.