CVE-2026-74220 | U-Boot up to 2026.10-rc4 NFS Client net/nfs-common.c nfs_read_reply buffer overflow

September 30, 2026 Yanac

A vulnerability was found in U-Boot. It has been declared as critical. The affected element is the function nfs_read_reply of the file net/nfs-common.c of the component NFS Client. Executing a manipulation can lead to buffer overflow.

This vulnerability is tracked as CVE-2026-74220. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More