Critical severity9.8NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2022-30767

Description

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Das/U-Bootdescription
Github.com/u-bootllm-create
Range: <=2022.04, <=2022.07-rc2
U Boot/U Bootllm-fuzzy
Range: <=2022.04, <=2022.07-rc2
osv-coords91 versions
pkg:rpm/opensuse/u-boot-avnetultra96rev1&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-avnetultra96rev1&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-bananapim64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-bananapim64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-dragonboard410c&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-dragonboard410c&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-dragonboard820c&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-dragonboard820c&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-evb-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-evb-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-firefly-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-firefly-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-geekbox&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-geekbox&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-hikey&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-hikey&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-khadas-vim2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-khadas-vim2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-khadas-vim&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-khadas-vim&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-libretech-ac&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-libretech-ac&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-libretech-cc&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-libretech-cc&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-ls1012afrdmqspi&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-ls1012afrdmqspi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebudb-88f3720&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebudb-88f3720&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebudbarmada8k&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebudbarmada8k&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebuespressobin-88f3720&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebuespressobin-88f3720&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebumcbin-88f8040&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebumcbin-88f8040&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-nanopia64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-nanopia64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-c2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-c2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-c4&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-c4&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-n2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-n2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-orangepipc2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-orangepipc2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p2371-2180&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p2371-2180&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p2771-0000-500&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p2771-0000-500&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p3450-0000&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p3450-0000&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pine64plus&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pine64plus&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinebook&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinebook&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinebook-pro-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinebook-pro-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pineh64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pineh64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinephone&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinephone&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-poplar&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-poplar&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock64-rk3328&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock64-rk3328&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock960-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock960-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock-pi-4-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock-pi-4-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock-pi-n10-rk3399pro&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rockpro64-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rockpro64-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpi3&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpi3&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpi4&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpi4&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpiarm64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpiarm64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-xilinxzynqmpvirt&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-xilinxzynqmpvirt&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-xilinxzynqmpzcu102rev10&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-xilinxzynqmpzcu102rev10&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4
< 2021.01-150300.7.12.1+ 90 more
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1
- (no CPE)range: < 2019.01-5.8.1
- (no CPE)range: < 2019.01-5.8.1
- (no CPE)range: < 2019.01-5.8.1
- (no CPE)range: < 2019.01-5.8.1
- (no CPE)range: < 2021.01-150300.7.12.1
- (no CPE)range: < 2021.10-150400.4.5.1

Patches

Vulnerability mechanics

References

github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96nvdPatchThird Party Advisory
source.denx.de/u-boot/u-boot/-/commit/bdbf7a05e26f3c5fd437c99e2755ffde186ddc80nvdPatchVendor Advisory
securitylab.github.com/research/uboot-rce-nfs-vulnerability/nvdExploitThird Party Advisory
lists.denx.de/pipermail/u-boot/2022-May/483952.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2025/05/msg00001.htmlnvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000