CVE-2022-34835
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer...
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
CVE-2022-34835- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
CVE-2022-34835- Updated
- 2026-11-02
EUVDEUVD-2022-37741 No score
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
EUVD-2022-37741- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9gfq-p9vq-r563
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer...
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
GHSA-9gfq-p9vq-r563- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-34835
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
DEBIAN-CVE-2022-34835- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1751
uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment.
Security Fix(es):
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.(CVE-2022-34835)
- Record
OESA-2022-1751- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVUBUNTU-CVE-2022-34835
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
UBUNTU-CVE-2022-34835- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Record
CVE-2022-34835- Updated
- 2026-11-02
OSVSUSE-SU-2022:2584-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-30790: Fixed an arbitrary out-of-bounds write in the IP defragmentation (bsc#1200364).
- CVE-2022-30552: Fixed an out-of-bounds write in the IP defragmentation (bsc#1200363).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2584-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2653-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2653-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2654-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2654-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2661-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2661-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2666-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2666-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2667-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2667-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2712-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2712-1- Updated
- 2026-11-02
OSVUSN-5764-1 No score
u-boot vulnerabilities
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347)
Nicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled certain fragmented IP packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30552, CVE-2022-30790)
It was discovered that U-Boot incorrectly handled certain NFS lookup replies. A remote attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30767)
Jincheng Wang discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33103)
Tatsuhiko Yasumatsu discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33967)
It was discovered that U-Boot incorrectly handled the i2c command. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-34835)
- Record
USN-5764-1- Updated
- 2026-11-02
Affected products
- denx u-boot
- siemens ruggedcom rox mx5000
- siemens ruggedcom rox mx5000re
- siemens ruggedcom rox rx1400
- siemens ruggedcom rox rx1500
- siemens ruggedcom rox rx1501
- siemens ruggedcom rox rx1510
- siemens ruggedcom rox rx1511
- siemens ruggedcom rox rx1512
- siemens ruggedcom rox rx1524
- siemens ruggedcom rox rx1536
- siemens ruggedcom rox rx5000
Affected packages
| Package | Affected | Fixed |
|---|---|---|
u-bootDebian:12 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:13 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:14 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:11 |
before 2021.01+dfsg-5+deb11u1, plus listed versions 2021.01+dfsg-5 |
2021.01+dfsg-5+deb11u1 |
uboot-toolsopenEuler:20.03-LTS-SP1 |
before 2020.07-6.oe1 | 2020.07-6.oe1 |
uboot-toolsopenEuler:20.03-LTS-SP3 |
before 2020.07-6.oe1 | 2020.07-6.oe1 |
uboot-toolsopenEuler:22.03-LTS |
before 2021.10-3.oe2203 | 2021.10-3.oe2203 |
u-bootSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-boot-rpi3SUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-bootSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
Show 126 moreShow less
| Package | Affected | Fixed |
|---|---|---|
u-boot-rpi3SUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-bootSUSE:Linux Enterprise Server 15-LTSS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-boot-rpi3SUSE:Linux Enterprise Server 15-LTSS |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-bootSUSE:Linux Enterprise Server for SAP Applications 15 |
before 2018.03-150000.4.11.1 | 2018.03-150000.4.11.1 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-bootopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-bananapim64openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-dragonboard410copenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-dragonboard820copenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-evb-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-geekboxopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-hikeyopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-khadas-vimopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-khadas-vim2openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-libretech-acopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-libretech-ccopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-nanopia64openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-c2openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-c4openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-n2openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-orangepipc2openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p2371-2180openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p3450-0000openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pine64plusopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinebookopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pineh64openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinephoneopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-poplaropenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpi3openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpi4openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpiarm64openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.3 |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-bootSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-rpiarm64SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-rpiarm64SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Linux Enterprise Server 15 SP2-BCL |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Manager Proxy 4.1 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Manager Retail Branch Server 4.1 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Manager Server 4.1 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Enterprise Storage 7 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-rpiarm64SUSE:Enterprise Storage 7 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-xilinxzynqmpgenericopenSUSE:Leap 15.3 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-boot-xilinxzynqmpgenericopenSUSE:Leap 15.4 |
before 2020.01-150200.10.15.1 | 2020.01-150200.10.15.1 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-bootopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-bananapim64openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-dragonboard410copenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-dragonboard820copenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-evb-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-geekboxopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-hikeyopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-khadas-vimopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-khadas-vim2openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-libretech-acopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-libretech-ccopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-nanopia64openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-c2openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-c4openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-n2openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-orangepipc2openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p2371-2180openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p3450-0000openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pine64plusopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinebookopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pineh64openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinephoneopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-poplaropenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock-pi-n10-rk3399proopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpi3openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpi4openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpiarm64openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.4 |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-bootSUSE:Linux Enterprise Server 12 SP5 |
before 2019.01-5.11.1 | 2019.01-5.11.1 |
u-boot-rpi3SUSE:Linux Enterprise Server 12 SP5 |
before 2019.01-5.11.1 | 2019.01-5.11.1 |
u-bootSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2019.01-5.11.1 | 2019.01-5.11.1 |
u-boot-rpi3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2019.01-5.11.1 | 2019.01-5.11.1 |
u-bootSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-boot-rpi3SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-boot-rpi3SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Linux Enterprise Server 15 SP1-BCL |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-boot-rpi3SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Enterprise Storage 6 |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-boot-rpi3SUSE:Enterprise Storage 6 |
before 2019.01-150100.7.16.1 | 2019.01-150100.7.16.1 |
u-bootSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2018.03-4.9.1 | 2018.03-4.9.1 |
u-boot-rpi3SUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2018.03-4.9.1 | 2018.03-4.9.1 |
u-bootUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2015.04+dfsg1-2ubuntu12015.10+dfsg1-22015.10+dfsg1-32015.10+dfsg1-42016.01+dfsg1-1 Show 7 moreShow less2016.01+dfsg1-1ubuntu12016.01+dfsg1-2ubuntu12016.01+dfsg1-2ubuntu22016.01+dfsg1-2ubuntu32016.01+dfsg1-2ubuntu52016.01+dfsg1-2ubuntu5+esm12016.01+dfsg1-2ubuntu5+esm2 |
None known |
u-bootUbuntu:18.04:LTS |
before 2020.10+dfsg-1ubuntu0~18.04.3, plus listed versions 2016.03+dfsg1-6ubuntu22018.07~rc3+dfsg1-0ubuntu1~18.04.12018.07~rc3+dfsg1-0ubuntu2~18.04.12018.07~rc3+dfsg1-0ubuntu3~18.04.12019.07+dfsg-1ubuntu4~18.04.12020.10+dfsg-1ubuntu0~18.04.2 |
2020.10+dfsg-1ubuntu0~18.04.3 |
u-bootUbuntu:20.04:LTS |
before 2021.01+dfsg-3ubuntu0~20.04.5, plus listed versions 2019.07+dfsg-1ubuntu32019.07+dfsg-1ubuntu52019.07+dfsg-1ubuntu62020.10+dfsg-1ubuntu0~20.04.22021.01+dfsg-3ubuntu0~20.04.12021.01+dfsg-3ubuntu0~20.04.32021.01+dfsg-3ubuntu0~20.04.4 |
2021.01+dfsg-3ubuntu0~20.04.5 |
u-bootUbuntu:22.04:LTS |
before 2022.01+dfsg-2ubuntu2.3, plus listed versions 2021.07+dfsg-0ubuntu82021.07+dfsg-0ubuntu92021.07+dfsg-0ubuntu102022.01+dfsg-2ubuntu12022.01+dfsg-2ubuntu22022.01+dfsg-2ubuntu2.1 |
2022.01+dfsg-2ubuntu2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34835 is a critical vulnerability (CVSS 9.8) in Denx U-boot, published June 29, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in u-boot 2022.07+dfsg-1.
References
lists.denx.de/pipermail/u-boot/2022-June/486113.html
github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
lists.debian.org/debian-lts-announce/2025/05/msg00001.html
cert-portal.siemens.com/productcert/html/ssa-577017.html
nvd.nist.gov/vuln/detail/CVE-2022-34835
Show 28 moreShow less
security-tracker.debian.org/tracker/CVE-2022-34835
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1751
suse.com/support/update/announcement/2022/suse-su-20222584-1
bugzilla.suse.com/1200363
ubuntu.com/security/CVE-2022-34835
cve.org/CVERecord?id=CVE-2022-34835