Das U-Boot Integer Overflow Vulnerability in SquashFS Symlink Resolution

A vulnerability exists in Das U-Boot bootloader versions prior to 2025.01-rc1, due to an integer overflow in the 'sqfs_resolve_symlink' function. This vulnerability can be triggered by a crafted SquashFS filesystem that includes an inode size of 0xffffffff. The resulting memory corruption occurs because the overflow leads to a memory allocation of zero, which is then overwritten, creating potential for exploitation.

Impact

Exploitation of this vulnerability causes memory corruption, which can be leveraged to bypass verified boot processes, disrupt the chain of trust, and execute arbitrary code.

Remediation

Users are advised to upgrade to U-Boot version 2025.01-rc1 or later.