CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019

Back Api.Msrc.Microsoft

CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Das U-Boot NFS Handler Vulnerabilities Eleven Common Vulnerabilities and Exposures (CVEs) have been identified in Das U-Boot, specifically affecting the NFS handler functions. These vulnerabilities, which include stack-based buffer overflows and unbounded memory copies, were discovered in the 2019.07 version and could potentially allow for unauthorized access or data corruption. All identified CVEs were published on July 31, 2019. 12 sources 54

Extracted Entities

CVEs (1)

Platforms (1)