AM4376: ti-processor-sdk-linux-am437x-hs-evm-06.03.00.106

Raju Tiwari

Part Number: AM4376

CVEs details- In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. nvd.nist.gov/.../CVE-2022-34835 Patched details- lists.denx.de/.../486113.html Can you reconfirm if this CVEs is been fixed/mitigated from TI-U boot code shared.

over 2 years ago

0 Raju Tiwari over 2 years ago

Prodigy 70 points

Kindly share the u-boot -TISDK link the CVEs is been fixed, currently we are using -ti-processor-sdk-linux-am437x-hs-evm-06.03.00.106

0 Raju Tiwari over 2 years ago in reply to Raju Tiwari

Prodigy 70 points

The current -

ti-processor-sdk-linux-am437x-hs-evm-06.03.00.106/board-support/u-boot-2019.01+gitAUTOINC+333c3e72d3-g333c3e72d3 has detected -CVE-2022-34835 after scanning the image

0 Hong Guan64 over 2 years ago in reply to Raju Tiwari

TI__Guru* 79380 points

Hello Raju,
Thanks for your inquiry on nvd.nist.gov/.../CVE-2022-34835
1/. the original commit
git.ti.com/gitweb
2/. the original commit reverted
git.ti.com/gitweb
3/. the new commit
git.ti.com/gitweb
"i2c: fix stack buffer overflow vulnerability in i2c md command

This reinstates fix from commit 8f8c04bf1ebb ("i2c: fix stack buffer
overflow vulnerability in i2c md command") without the changes unrelated
to the actual fix. Avoid the underflow by setting only nbytes and
linebytes as unsigned integers."

Please note that
- CVE-2022-34835 is on mainline u-boot (not TI specific)
- Recommendation is applying or (back-)porting the new commit as recommended and noted in 3/. above.

Best,
-Hong

Processors

Processors forum

AM4376: ti-processor-sdk-linux-am437x-hs-evm-06.03.00.106