CVE-2026-74222
u-boot-amlogic: U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wge...
CVE-2026-74222 is fixed in 20 products on 1 platform, first by u-boot-amlogic 2025.10-0ubuntu2.2, released September 29, 2026. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0030
22nd percentile
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR_BUF instead of ERR_ABRT, causing the TCP input path to access released memory and crash the bootloader.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| u-boot-amlogic · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-amlogic 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-amlogic · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-amlogic 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-amlogic-binaries · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-amlogic-binaries 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-amlogic-binaries · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-amlogic-binaries 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-asahi · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-asahi 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-asahi · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-asahi 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-exynos · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-exynos 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-exynos · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-exynos 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-exynos-binaries · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-exynos-binaries 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-exynos-binaries · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-exynos-binaries 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-imx · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-imx 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-imx · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-imx 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-microchip · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-microchip 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-microchip · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-microchip 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-mvebu · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-mvebu 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-mvebu · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-mvebu 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-omap · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-omap 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-omap · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-omap 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-qcom · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-qcom 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-qcom · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-qcom 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-qemu · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-qemu 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-qemu · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-qemu 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-rockchip · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-rockchip 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-rockchip · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-rockchip 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-rpi · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-rpi 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-rpi · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-rpi 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-sifive · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-sifive 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-sifive · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-sifive 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-sitara-binaries · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-sitara-binaries 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-sitara-binaries · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-sitara-binaries 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-starfive · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-starfive 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-starfive · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-starfive 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-stm32 · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-stm32 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-stm32 · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-stm32 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-sunxi · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-sunxi 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-sunxi · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-sunxi 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-tegra · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-tegra 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-tegra · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-tegra 2025.10-0ubuntu2.2 | Sep 29, 2026 |
| u-boot-tools · Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | u-boot-tools 2025.10-0ubuntu0.24.04.4 | Oct 19, 2026 |
| u-boot-tools · Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | u-boot-tools 2025.10-0ubuntu2.2 | Sep 29, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.