Das U-Boot Integer Overflow Vulnerability in SquashFS Symlink Size Calculation

A vulnerability allowing for integer overflow has been identified in Das U-Boot versions prior to 2025.01-rc1. This issue occurs in the symlink size calculation within the 'sqfs_inode_size' function, when processing a crafted SquashFS filesystem. The integer overflow can lead to memory corruption vulnerabilities, which may be exploited to bypass verified boot and execute arbitrary code, according to the vendor.

Impact

Exploitation of this vulnerability causes an integer overflow, leading to memory corruption. In systems with verified boot, this allows an attacker to bypass the chain of trust and execute arbitrary code.

Remediation

Users are advised to upgrade to U-Boot version 2025.01-rc1 or newer.