PT-2022-7001 · U-Boot+5 · U-Boot+5

Fermin J. Serna + 2 · Published 2022-05-15 · Updated 2025-08-12 · CVE-2022-30767

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions U-Boot versions through 2022.04 U-Boot versions through 2022.07-rc2

Description The issue is related to the nfs lookup reply function in net/nfs.c, which is part of the U-Boot bootloader for Linux-based embedded operating systems. It involves a buffer copy operation without proper input size validation, potentially leading to a buffer overflow. This could allow an attacker to execute arbitrary code.

Recommendations For U-Boot versions through 2022.04, update to a version that includes a correct fix for the issue. For U-Boot versions through 2022.07-rc2, update to a version that includes a correct fix for the issue. As a temporary workaround, consider restricting access to the nfs lookup reply function in net/nfs.c to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2022-2236

ALT-PU-2023-4892

BDU:2023-06308

CVE-2022-30767

DLA-4150-1

OESA-2022-1978

OPENSUSE-SU-2022_2053-1

SUSE-SU-2022:2052-1

SUSE-SU-2022:2053-1

SUSE-SU-2022:2054-1

USN-5764-1

Affected Products

Alt Linux

Debian

Linuxmint

Suse

U-Boot

Ubuntu

References · 43

• 🔥 https://securitylab.github.com/research/uboot-rce-nfs-vulnerability · Exploit
• https://github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96 · Patch
• https://ubuntu.com/security/CVE-2022-33967 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2347 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4150-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-34835 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-30790 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-30767 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2053-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-30552 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33103 · Vendor Advisory