CVE-2021-27138: Denx U-Boot

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.

Affected products

• Denx U-Boot: up to and including 2021.01; version 2021.04 only

Published 2021-02-17. Last modified 2026-06-17.