CVE-2020-10648

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-03-19 · updated 2026-06-17
Weakness: CWE-20

Description

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.

Affected products

u-boot: before 2018.03; 2020.01 — fixed in 2018.03
openSUSE Leap: 15.2

How to fix

Upgrade to a fixed version: u-boot 2018.03. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html
http://www.openwall.com/lists/oss-security/2020/03/18/5
https://github.com/u-boot/u-boot/commits/master
https://labs.f-secure.com/advisories/das-u-boot-verified-boot-bypass/
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html
http://www.openwall.com/lists/oss-security/2020/03/18/5
https://github.com/u-boot/u-boot/commits/master
https://labs.f-secure.com/advisories/das-u-boot-verified-boot-bypass/
https://cert-portal.siemens.com/productcert/html/ssa-577017.html

Get alerted when CVE-2020-10648 or the next vulnerability affects your stack