CVE-2022-30790

Name of the Vulnerable Software and Affected Versions U-Boot version 2022.01

Description The issue is related to a buffer overflow in the CONFIG IP DEFRAG function, which is responsible for IP packet defragmentation in U-Boot bootloaders for Linux-based embedded operating systems. This is caused by errors in handling input data and the possibility of writing beyond buffer boundaries. Exploitation of this issue could allow a remote attacker to overwrite metadata and gain access to the operating system with superuser privileges by sending a specially crafted IP packet.

Recommendations For U-Boot version 2022.01, at the moment, there is no information about a newer version that contains a fix for this issue.