HIGH🇵🇱 Wersja polska

CVE-2022-29275

CVSS 8.2v3.1pub. 2022-11-15upd. 2025-04-30

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Insyde Kernel

    OS
    Insyde
    5.0 – 5.0.05.09.215.1 – 5.1.05.17.21 (excl.)5.2 – 5.2.05.27.21 (excl.)5.3 – 5.3.05.36.21 (excl.)5.4 – 5.4.05.44.21 (excl.)5.5 – 5.5.05.52.21 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-52880HIGH7.9same product

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-25078HIGH7.4same product

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB191301...

CVE-2022-36337HIGH8.2same product

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability...

CVE-2022-35407HIGH7.8same product

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbi...

CVE-2022-29276HIGH8.2same product

SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe u...