Critical severity9.8NVD Advisory· Published Jun 30, 2022· Updated May 12, 2026

CVE-2022-34835

Description

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

133

Denx/U Boot6 versions
cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*range: <2022.07
- cpe:2.3:a:denx:u-boot:2022.07:rc1:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2022.07:rc3:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2022.07:rc4:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2022.07:rc5:*:*:*:*:*:*
Das/U-Bootdescription
U Boot/U Bootllm-fuzzy
Range: <=2022.07-rc5
osv-coords125 versions
pkg:rpm/opensuse/u-boot-avnetultra96rev1&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-avnetultra96rev1&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-bananapim64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-bananapim64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-dragonboard410c&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-dragonboard410c&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-dragonboard820c&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-dragonboard820c&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-evb-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-evb-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-firefly-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-firefly-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-geekbox&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-geekbox&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-hikey&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-hikey&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-khadas-vim2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-khadas-vim2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-khadas-vim&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-khadas-vim&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-libretech-ac&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-libretech-ac&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-libretech-cc&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-libretech-cc&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-ls1012afrdmqspi&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-ls1012afrdmqspi&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebudb-88f3720&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebudb-88f3720&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebudbarmada8k&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebudbarmada8k&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebuespressobin-88f3720&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebuespressobin-88f3720&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-mvebumcbin-88f8040&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-mvebumcbin-88f8040&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-nanopia64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-nanopia64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-c2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-c2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-c4&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-c4&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-odroid-n2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-odroid-n2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-orangepipc2&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-orangepipc2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p2371-2180&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p2371-2180&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p2771-0000-500&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p2771-0000-500&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-p3450-0000&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-p3450-0000&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pine64plus&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pine64plus&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinebook&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinebook&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinebook-pro-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinebook-pro-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pineh64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pineh64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-pinephone&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-pinephone&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-poplar&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-poplar&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock64-rk3328&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock64-rk3328&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock960-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock960-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock-pi-4-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rock-pi-4-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rock-pi-n10-rk3399pro&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rockpro64-rk3399&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rockpro64-rk3399&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpi3&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpi3&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpi4&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpi4&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-rpiarm64&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-rpiarm64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-xilinxzynqmpgeneric&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-xilinxzynqmpgeneric&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-xilinxzynqmpvirt&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-xilinxzynqmpvirt&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/u-boot-xilinxzynqmpzcu102rev10&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/u-boot-xilinxzynqmpzcu102rev10&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/u-boot&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/u-boot&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/u-boot&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/u-boot&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/u-boot&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS
< 2021.01-150300.7.15.1+ 124 more
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2018.03-4.9.1
- (no CPE)range: < 2019.01-5.11.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2019.01-5.11.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2018.03-4.9.1
- (no CPE)range: < 2019.01-5.11.1
- (no CPE)range: < 2019.01-150100.7.16.1
- (no CPE)range: < 2018.03-150000.4.11.1
- (no CPE)range: < 2019.01-5.11.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2020.01-150200.10.15.1
- (no CPE)range: < 2021.01-150300.7.15.1
- (no CPE)range: < 2021.10-150400.4.8.1
- (no CPE)range: < 2020.01-150200.10.15.1

Patches

Vulnerability mechanics

References

source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409nvdPatchVendor Advisory
github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409nvdExploitPatchThird Party Advisory
lists.denx.de/pipermail/u-boot/2022-June/486113.htmlnvdExploitPatchVendor Advisory
cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
lists.debian.org/debian-lts-announce/2025/05/msg00001.htmlnvd

News mentions

Siemens Ruggedcom Rox
CISA ICS Advisories

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000