CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-29007

U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attackers can send a packet with an IP total length of 40 bytes and a TCP data offset claiming 60 bytes of header to cause tcp_parse_options() to read 40 bytes past the end of the TCP segment, potentially corrupting connection state variables such as rmt_win_scale and rmt_timestamp to disrupt TCP window calculations.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 42.6%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2026-29007

Denx » U-Boot » Version: N/A

cpe:2.3:a:denx:u-boot:-
Denx » U-Boot » Version: 0.2.0

cpe:2.3:a:denx:u-boot:0.2.0
Denx » U-Boot » Version: 0.2.3

cpe:2.3:a:denx:u-boot:0.2.3
Denx » U-Boot » Version: 0.3.0

cpe:2.3:a:denx:u-boot:0.3.0
Denx » U-Boot » Version: 0.3.1

cpe:2.3:a:denx:u-boot:0.3.1
Denx » U-Boot » Version: 0.4.0

cpe:2.3:a:denx:u-boot:0.4.0
Denx » U-Boot » Version: 0.4.1

cpe:2.3:a:denx:u-boot:0.4.1
Denx » U-Boot » Version: 0.4.2

cpe:2.3:a:denx:u-boot:0.4.2
Denx » U-Boot » Version: 0.4.3

cpe:2.3:a:denx:u-boot:0.4.3
Denx » U-Boot » Version: 0.4.4

cpe:2.3:a:denx:u-boot:0.4.4
Denx » U-Boot » Version: 0.4.5

cpe:2.3:a:denx:u-boot:0.4.5
Denx » U-Boot » Version: 0.4.6

cpe:2.3:a:denx:u-boot:0.4.6
Denx » U-Boot » Version: 0.4.7

cpe:2.3:a:denx:u-boot:0.4.7
Denx » U-Boot » Version: 0.4.8

cpe:2.3:a:denx:u-boot:0.4.8
Denx » U-Boot » Version: 1.0.0

cpe:2.3:a:denx:u-boot:1.0.0
Denx » U-Boot » Version: 1.0.1

cpe:2.3:a:denx:u-boot:1.0.1
Denx » U-Boot » Version: 1.0.2

cpe:2.3:a:denx:u-boot:1.0.2
Denx » U-Boot » Version: 1.1.0

cpe:2.3:a:denx:u-boot:1.1.0
Denx » U-Boot » Version: 1.1.1

cpe:2.3:a:denx:u-boot:1.1.1
Denx » U-Boot » Version: 1.1.2

cpe:2.3:a:denx:u-boot:1.1.2
Denx » U-Boot » Version: 1.1.3

cpe:2.3:a:denx:u-boot:1.1.3
Denx » U-Boot » Version: 1.1.4

cpe:2.3:a:denx:u-boot:1.1.4
Denx » U-Boot » Version: 1.1.5

cpe:2.3:a:denx:u-boot:1.1.5
Denx » U-Boot » Version: 1.1.6

cpe:2.3:a:denx:u-boot:1.1.6
Denx » U-Boot » Version: 1.2.0

cpe:2.3:a:denx:u-boot:1.2.0
Denx » U-Boot » Version: 1.3.0

cpe:2.3:a:denx:u-boot:1.3.0
Denx » U-Boot » Version: 1.3.1

cpe:2.3:a:denx:u-boot:1.3.1
Denx » U-Boot » Version: 1.3.3

cpe:2.3:a:denx:u-boot:1.3.3
Denx » U-Boot » Version: 1.3.4

cpe:2.3:a:denx:u-boot:1.3.4
Denx » U-Boot » Version: 2008.10

cpe:2.3:a:denx:u-boot:2008.10
Denx » U-Boot » Version: 2009.01

cpe:2.3:a:denx:u-boot:2009.01
Denx » U-Boot » Version: 2009.03

cpe:2.3:a:denx:u-boot:2009.03
Denx » U-Boot » Version: 2009.06

cpe:2.3:a:denx:u-boot:2009.06
Denx » U-Boot » Version: 2009.08

cpe:2.3:a:denx:u-boot:2009.08
Denx » U-Boot » Version: 2009.11

cpe:2.3:a:denx:u-boot:2009.11
Denx » U-Boot » Version: 2009.11.1

cpe:2.3:a:denx:u-boot:2009.11.1
Denx » U-Boot » Version: 2010.03

cpe:2.3:a:denx:u-boot:2010.03
Denx » U-Boot » Version: 2010.06

cpe:2.3:a:denx:u-boot:2010.06
Denx » U-Boot » Version: 2010.09

cpe:2.3:a:denx:u-boot:2010.09
Denx » U-Boot » Version: 2010.12

cpe:2.3:a:denx:u-boot:2010.12
Denx » U-Boot » Version: 2011.03

cpe:2.3:a:denx:u-boot:2011.03
Denx » U-Boot » Version: 2011.04.01

cpe:2.3:a:denx:u-boot:2011.04.01
Denx » U-Boot » Version: 2011.06

cpe:2.3:a:denx:u-boot:2011.06
Denx » U-Boot » Version: 2011.09

cpe:2.3:a:denx:u-boot:2011.09
Denx » U-Boot » Version: 2011.12

cpe:2.3:a:denx:u-boot:2011.12
Denx » U-Boot » Version: 2012.04

cpe:2.3:a:denx:u-boot:2012.04
Denx » U-Boot » Version: 2012.04.01

cpe:2.3:a:denx:u-boot:2012.04.01
Denx » U-Boot » Version: 2012.07

cpe:2.3:a:denx:u-boot:2012.07
Denx » U-Boot » Version: 2012.10

cpe:2.3:a:denx:u-boot:2012.10
Denx » U-Boot » Version: 2013.01

cpe:2.3:a:denx:u-boot:2013.01
Denx » U-Boot » Version: 2013.01.01

cpe:2.3:a:denx:u-boot:2013.01.01
Denx » U-Boot » Version: 2013.04

cpe:2.3:a:denx:u-boot:2013.04
Denx » U-Boot » Version: 2013.07

cpe:2.3:a:denx:u-boot:2013.07
Denx » U-Boot » Version: 2013.10

cpe:2.3:a:denx:u-boot:2013.10
Denx » U-Boot » Version: 2014.01

cpe:2.3:a:denx:u-boot:2014.01
Denx » U-Boot » Version: 2014.04

cpe:2.3:a:denx:u-boot:2014.04
Denx » U-Boot » Version: 2014.07

cpe:2.3:a:denx:u-boot:2014.07
Denx » U-Boot » Version: 2014.10

cpe:2.3:a:denx:u-boot:2014.10
Denx » U-Boot » Version: 2015.01

cpe:2.3:a:denx:u-boot:2015.01
Denx » U-Boot » Version: 2015.04

cpe:2.3:a:denx:u-boot:2015.04
Denx » U-Boot » Version: 2015.07

cpe:2.3:a:denx:u-boot:2015.07
Denx » U-Boot » Version: 2015.10

cpe:2.3:a:denx:u-boot:2015.10
Denx » U-Boot » Version: 2016.01

cpe:2.3:a:denx:u-boot:2016.01
Denx » U-Boot » Version: 2016.03

cpe:2.3:a:denx:u-boot:2016.03
Denx » U-Boot » Version: 2016.05

cpe:2.3:a:denx:u-boot:2016.05
Denx » U-Boot » Version: 2016.07

cpe:2.3:a:denx:u-boot:2016.07
Denx » U-Boot » Version: 2016.09

cpe:2.3:a:denx:u-boot:2016.09
Denx » U-Boot » Version: 2016.09.01

cpe:2.3:a:denx:u-boot:2016.09.01
Denx » U-Boot » Version: 2016.11

cpe:2.3:a:denx:u-boot:2016.11
Denx » U-Boot » Version: 2017.01

cpe:2.3:a:denx:u-boot:2017.01
Denx » U-Boot » Version: 2017.03

cpe:2.3:a:denx:u-boot:2017.03
Denx » U-Boot » Version: 2017.05

cpe:2.3:a:denx:u-boot:2017.05
Denx » U-Boot » Version: 2017.07

cpe:2.3:a:denx:u-boot:2017.07
Denx » U-Boot » Version: 2017.09

cpe:2.3:a:denx:u-boot:2017.09
Denx » U-Boot » Version: 2017.11

cpe:2.3:a:denx:u-boot:2017.11
Denx » U-Boot » Version: 2018.01

cpe:2.3:a:denx:u-boot:2018.01
Denx » U-Boot » Version: 2018.03

cpe:2.3:a:denx:u-boot:2018.03
Denx » U-Boot » Version: 2018.05

cpe:2.3:a:denx:u-boot:2018.05
Denx » U-Boot » Version: 2018.07

cpe:2.3:a:denx:u-boot:2018.07
Denx » U-Boot » Version: 2018.09

cpe:2.3:a:denx:u-boot:2018.09
Denx » U-Boot » Version: 2018.11

cpe:2.3:a:denx:u-boot:2018.11
Denx » U-Boot » Version: 2019.01

cpe:2.3:a:denx:u-boot:2019.01
Denx » U-Boot » Version: 2019.04

cpe:2.3:a:denx:u-boot:2019.04
Denx » U-Boot » Version: 2019.07

cpe:2.3:a:denx:u-boot:2019.07
Denx » U-Boot » Version: 2019.10

cpe:2.3:a:denx:u-boot:2019.10
Denx » U-Boot » Version: 2020.01

cpe:2.3:a:denx:u-boot:2020.01
Denx » U-Boot » Version: 2020.04

cpe:2.3:a:denx:u-boot:2020.04
Denx » U-Boot » Version: 2020.07

cpe:2.3:a:denx:u-boot:2020.07
Denx » U-Boot » Version: 2020.10

cpe:2.3:a:denx:u-boot:2020.10
Denx » U-Boot » Version: 2021.01

cpe:2.3:a:denx:u-boot:2021.01
Denx » U-Boot » Version: 2021.04

cpe:2.3:a:denx:u-boot:2021.04
Denx » U-Boot » Version: 2022.01

cpe:2.3:a:denx:u-boot:2022.01
Denx » U-Boot » Version: 2022.04

cpe:2.3:a:denx:u-boot:2022.04
Denx » U-Boot » Version: 2022.07

cpe:2.3:a:denx:u-boot:2022.07
Denx » U-Boot » Version: 2022.10

cpe:2.3:a:denx:u-boot:2022.10
Denx » U-Boot » Version: 2023.01

cpe:2.3:a:denx:u-boot:2023.01
Denx » U-Boot » Version: 2023.04

cpe:2.3:a:denx:u-boot:2023.04
Denx » U-Boot » Version: 2023.07

cpe:2.3:a:denx:u-boot:2023.07
Denx » U-Boot » Version: 2023.07.02

cpe:2.3:a:denx:u-boot:2023.07.02
Denx » U-Boot » Version: 2023.10

cpe:2.3:a:denx:u-boot:2023.10
Denx » U-Boot » Version: 2024.01

cpe:2.3:a:denx:u-boot:2024.01
Denx » U-Boot » Version: 2024.04

cpe:2.3:a:denx:u-boot:2024.04
Denx » U-Boot » Version: 2024.07

cpe:2.3:a:denx:u-boot:2024.07
Denx » U-Boot » Version: 2024.10

cpe:2.3:a:denx:u-boot:2024.10
Denx » U-Boot » Version: 2025.01

cpe:2.3:a:denx:u-boot:2025.01
Denx » U-Boot » Version: 2025.04

cpe:2.3:a:denx:u-boot:2025.04
Denx » U-Boot » Version: 2025.07

cpe:2.3:a:denx:u-boot:2025.07
Denx » U-Boot » Version: 2025.10

cpe:2.3:a:denx:u-boot:2025.10
Denx » U-Boot » Version: 2026.01

cpe:2.3:a:denx:u-boot:2026.01
Denx » U-Boot » Version: 2026.04

cpe:2.3:a:denx:u-boot:2026.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-29007

Products

Pricing

Contact Us