Das U-Boot Integer Overflow Vulnerability in ext4 Filesystem Symlink Handling

A vulnerability allowing for memory corruption has been identified in Das U-Boot bootloader versions through 2024.10. This issue arises from an integer overflow in the 'ext4fs_read_symlink' function, where a crafted ext4 filesystem with an inode size of 0xffffffff causes an improper allocation of memory. The overflow occurs by adding one to a little-endian 32-bit variable, leading to a zero allocation and subsequent memory overwrite.

Impact

Exploitation of this vulnerability causes heap corruption, allowing for a memory overwrite that could be leveraged for arbitrary code execution.

Remediation

Users are advised to upgrade to U-Boot version 2025.01-rc1 or later.