VYPR
← All advisories
Unrated severityNVD Advisory· Published May 16, 2022· Updated Nov 3, 2025

CVE-2022-30767

CVE-2022-30767

Description

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A buffer overflow in U-Boot's NFS lookup reply handler due to an incomplete fix for CVE-2019-14196, allowing potential code execution.

Vulnerability

A buffer overflow vulnerability exists in the nfs_lookup_reply function in net/nfs.c of Das U-Boot through version 2022.04 (and through 2022.07-rc2). The issue stems from an unbounded memcpy with a failed length check, which was introduced as an incorrect fix for CVE-2019-14196 [2]. Affected versions include all U-Boot releases up to and including 2022.04, as well as release candidate 2022.07-rc2 [1].

Exploitation

An attacker must be on the same network as the target device or control a malicious NFS server. By sending a crafted NFS reply to a U-Boot client configured to boot via NFS, the attacker can trigger the unbounded memcpy, overwriting adjacent memory [1]. No authentication is required beyond network access.

Impact

Successful exploitation allows an attacker to achieve remote code execution at the U-Boot privilege level, before any signature verification of boot images. This can lead to full compromise of the device, bypassing verified boot mechanisms [1].

Mitigation

As of publication, no official patch has been released for CVE-2022-30767. The fix for CVE-2019-14196 was found to be ineffective [2]. Workarounds include disabling NFS boot support or ensuring that only trusted NFS servers are used. Users should monitor the U-Boot repository for upcoming fixes.

References
  1. U-Boot NFS RCE Vulnerabilities (CVE-2019-14192)
  2. Ineffective fix of CVE-2019-14196

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

93

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.