# CVE-2026-74222: u-boot-amlogic: U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wge...

CVE-2026-74222 is fixed in 20 products on 1 platform, first by u-boot-amlogic 2025.10-0ubuntu2.2, released September 29, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-74222
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0030
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 29, 2026

## Description

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR_BUF instead of ERR_ABRT, causing the TCP input path to access released memory and crash the bootloader.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | u-boot-amlogic Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-amlogic 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-amlogic-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-amlogic Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-amlogic 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-amlogic-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-amlogic-binaries Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-amlogic-binaries 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-amlogic-binaries-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-amlogic-binaries Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-amlogic-binaries 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-amlogic-binaries-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-asahi Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-asahi 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-asahi-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-asahi Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-asahi 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-asahi-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-exynos Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-exynos 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-exynos-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-exynos Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-exynos 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-exynos-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-exynos-binaries Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-exynos-binaries 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-exynos-binaries-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-exynos-binaries Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-exynos-binaries 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-exynos-binaries-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-imx Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-imx 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-imx-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-imx Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-imx 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-imx-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-microchip Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-microchip 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-microchip-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-microchip Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-microchip 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-microchip-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-mvebu Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-mvebu 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-mvebu-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-mvebu Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-mvebu 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-mvebu-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-omap Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-omap 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-omap-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-omap Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-omap 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-omap-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-qcom Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-qcom 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-qcom-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-qcom Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-qcom 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-qcom-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-qemu Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-qemu 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-qemu-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-qemu Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-qemu 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-qemu-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-rockchip Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-rockchip 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-rockchip-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-rockchip Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-rockchip 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-rockchip-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-rpi Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-rpi 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-rpi-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-rpi Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-rpi 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-rpi-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-sifive Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-sifive 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-sifive-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-sifive Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-sifive 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-sifive-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-sitara-binaries Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-sitara-binaries 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-sitara-binaries-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-sitara-binaries Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-sitara-binaries 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-sitara-binaries-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-starfive Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-starfive 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-starfive-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-starfive Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-starfive 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-starfive-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-stm32 Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-stm32 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-stm32-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-stm32 Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-stm32 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-stm32-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-sunxi Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-sunxi 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-sunxi-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-sunxi Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-sunxi 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-sunxi-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-tegra Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-tegra 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-tegra-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-tegra Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-tegra 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-tegra-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |
| Linux | u-boot-tools Ubuntu 24.04.5 LTS (noble) | 2025.10-0ubuntu0.24.04.4 | [u-boot-tools 2025.10-0ubuntu0.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-u-boot-tools-2025.10-0ubuntu0.24.04.4.md) | Oct 19, 2026 |
| Linux | u-boot-tools Ubuntu 26.04.1 LTS (resolute) | 2025.10-0ubuntu2.2 | [u-boot-tools 2025.10-0ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-u-boot-tools-2025.10-0ubuntu2.2.md) | Sep 29, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.