{"schema_version":"2","view":"grouped","data":[{"id":3414,"cve_ids":["CVE-2026-15390"],"payload":{"kind":"advisory","title":"Out-of-bounds write in Das U-Boot","summary":"Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.","evidence":"cve:CVE-2026-15390","products":[{"name":{"value":"Das U-Boot","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-15390","aliases":["CVE-2026-15390"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9,"Automatable":"NOT_DEFINED","attackVector":"ADJACENT","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://source.denx.de/u-boot/u-boot","vendor":"DENX Software Engineering","modules":["__net_defragment()"],"product":"Das U-Boot","versions":[{"status":"affected","changes":[{"at":"commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa","status":"unaffected"}],"version":"2009.08","versionType":"date","lessThanOrEqual":"2026.07"}],"programFiles":["net.c"],"defaultStatus":"unaffected"}],"modified":"2026-09-29T10:55:43.070Z","provider":"cve","references":["https://cert.pl/en/posts/2026/09/CVE-2026-15390","https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-15390","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T10:53:14.845353Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T10:55:43.070Z"}}],"cna":{"orgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","shortName":"CERT-PL","dateUpdated":"2026-09-29T10:06:54.262Z"}}},"related_cves":[{"value":"CVE-2026-15390","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f73c14af-78ac-4351-a67c-9e96780634e5","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15390","advisory_id":"f73c14af-78ac-4351-a67c-9e96780634e5","event_types":["advisory"],"published_at":"2026-10-24T21:35:29.463054+00:00","technologies":["core-cve","das-u-boot"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T10:04:31.905+00:00","detail_url":"/advisories/advisory%3Af73c14af-78ac-4351-a67c-9e96780634e5","group":{"id":"advisory:f73c14af-78ac-4351-a67c-9e96780634e5","revision":1,"primary_event_id":3432,"change":"published","superseded_by":[],"changed":{"id":3432,"cve_ids":["CVE-2026-15390"],"payload":{"kind":"advisory","title":"Out-of-bounds write in Das U-Boot","summary":"Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.","evidence":"cve:CVE-2026-15390","products":[{"name":{"value":"Das U-Boot","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-15390","aliases":["CVE-2026-15390"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9,"Automatable":"NOT_DEFINED","attackVector":"ADJACENT","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://source.denx.de/u-boot/u-boot","vendor":"DENX Software Engineering","modules":["__net_defragment()"],"product":"Das U-Boot","versions":[{"status":"affected","changes":[{"at":"commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa","status":"unaffected"}],"version":"2009.08","versionType":"date","lessThanOrEqual":"2026.07"}],"programFiles":["net.c"],"defaultStatus":"unaffected"}],"modified":"2026-09-29T10:55:43.070Z","provider":"cve","references":["https://cert.pl/en/posts/2026/09/CVE-2026-15390","https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-15390","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T10:53:14.845353Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T10:55:43.070Z"}}],"cna":{"orgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","shortName":"CERT-PL","dateUpdated":"2026-09-29T10:06:54.262Z"}}},"related_cves":[{"value":"CVE-2026-15390","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f73c14af-78ac-4351-a67c-9e96780634e5","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15390","advisory_id":"f73c14af-78ac-4351-a67c-9e96780634e5","event_types":["advisory"],"published_at":"2026-10-24T21:35:29.463054+00:00","technologies":["core-cve","das-u-boot"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T10:04:31.905+00:00","detail_url":"/events/3432"},"members":[{"id":3432,"cve_ids":["CVE-2026-15390"],"payload":{"kind":"advisory","title":"Out-of-bounds write in Das U-Boot","summary":"Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.","evidence":"cve:CVE-2026-15390","products":[{"name":{"value":"Das U-Boot","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-15390","aliases":["CVE-2026-15390"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9,"Automatable":"NOT_DEFINED","attackVector":"ADJACENT","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://source.denx.de/u-boot/u-boot","vendor":"DENX Software Engineering","modules":["__net_defragment()"],"product":"Das U-Boot","versions":[{"status":"affected","changes":[{"at":"commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa","status":"unaffected"}],"version":"2009.08","versionType":"date","lessThanOrEqual":"2026.07"}],"programFiles":["net.c"],"defaultStatus":"unaffected"}],"modified":"2026-09-29T10:55:43.070Z","provider":"cve","references":["https://cert.pl/en/posts/2026/09/CVE-2026-15390","https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-15390","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T10:53:14.845353Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T10:55:43.070Z"}}],"cna":{"orgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","shortName":"CERT-PL","dateUpdated":"2026-09-29T10:06:54.262Z"}}},"related_cves":[{"value":"CVE-2026-15390","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f73c14af-78ac-4351-a67c-9e96780634e5","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15390","advisory_id":"f73c14af-78ac-4351-a67c-9e96780634e5","event_types":["advisory"],"published_at":"2026-10-24T21:35:29.463054+00:00","technologies":["core-cve","das-u-boot"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T10:04:31.905+00:00","detail_url":"/events/3432"}]}}],"next_after":3414,"next_before":3414}