CVE Vulnerability

CVE-2022-29276

SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.18 Kernel 5.1: version 05.17.18 Kernel 5.2: version 05.27.18 Kernel 5.3: version 05.36.18 Kernel 5.4: version 05.44.18 Kernel 5.5: version 05.52.18 https://www.insyde.com/security-pledge/SA-2022059

8.2 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.insyde.com/security-pledge Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022059 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
Information

Published : 2022-11-15 10:15

Updated : 2022-11-29 02:28

NVD link : CVE-2022-29276

Mitre link : CVE-2022-29276

Products Affected
No products.
CWE
CWE-787