PT-2023-36347 · U-Boot · U-Boot

Published 2023-11-20 · Updated 2023-11-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions U-boot version 2023.01

Description The issue occurs when U-boot is upgraded to version 2023.01 on RPI 4/CM4 boards, causing it to fail to boot. The log reports finding the EFI removable media binary efi/boot/bootaa64.efi, but reading the file would overwrite reserved memory. The updated package resolves this issue by allowing U-boot to load properly bootaa64.efi.

Recommendations For U-boot version 2023.01, update the package to the latest version to resolve the boot issue.

Related Identifiers

MGASA-2023-0323

Affected Products

U-Boot

References · 4

• https://advisories.mageia.org/MGASA-2023-0323.html · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0323 · Vendor Advisory
• https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=269181 · Note
• https://bugs.mageia.org/show_bug.cgi?id=32526 · Note