yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2024-57257
Component Overview
Vulnerability Overview
Name
CVE-2024-57257
Source
NVD (
link
)
Debian (
link
)
Description
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.
CWEs
CWE-674
Published Date
Feb 18, 2025
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://source.denx.de/u-boot/u-boot/-/commit/4f5cc096bfd0a591f8a11e86999e3d90a9484c34
Patch
https://www.openwall.com/lists/oss-security/2025/02/17/2
Mailing List
Analysis
#
Affected Component
Analysis
u-boot
Exploitable
Vulnerability Ratings
#
2
CVSSv31
2.4
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
uboot-tools
buildroot
2025.02.x
2021.07
Exploitable
uboot-tools
buildroot
master
2026.04
Not Affected
u-boot
yocto
master
2026.04
Not Affected
u-boot
yocto
scarthgap
2024.01
Exploitable