vulnerability

Ubuntu: USN-5764-1 (CVE-2022-34835): U-Boot vulnerabilities

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jun 30, 2022
Added
Dec 7, 2022
Modified
Aug 18, 2025

Description

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

Solutions

ubuntu-upgrade-u-bootubuntu-upgrade-u-boot-amlogicubuntu-upgrade-u-boot-exynosubuntu-upgrade-u-boot-imxubuntu-upgrade-u-boot-microchipubuntu-upgrade-u-boot-mvebuubuntu-upgrade-u-boot-omapubuntu-upgrade-u-boot-qcomubuntu-upgrade-u-boot-qemuubuntu-upgrade-u-boot-rockchipubuntu-upgrade-u-boot-rpiubuntu-upgrade-u-boot-sifiveubuntu-upgrade-u-boot-stm32ubuntu-upgrade-u-boot-sunxiubuntu-upgrade-u-boot-tegraubuntu-upgrade-u-boot-tools
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.