CVE Vulnerability

CVE-2022-29278

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version 05.17.23 Kernel 5.2: Version 05.27.23 Kernel 5.3: Version 05.36.23 Kernel 5.4: Version 05.44.23 Kernel 5.5: Version 05.52.23 https://www.insyde.com/security-pledge/SA-2022061

8.2 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.insyde.com/security-pledge Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022061 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*
Information

Published : 2022-11-15 10:15

Updated : 2022-11-29 02:27

NVD link : CVE-2022-29278

Mitre link : CVE-2022-29278

Products Affected
No products.
CWE
CWE-754