CVEvulnerability

CVE-2022-29275

8.2 HIGH Published 2022-11-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-119

Description

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058

Affected configurations

• insyde kernel (>= 5.0 <= 5.0.05.09.21) • insyde kernel (>= 5.1 < 5.1.05.17.21) • insyde kernel (>= 5.2 < 5.2.05.27.21) • insyde kernel (>= 5.3 < 5.3.05.36.21) • insyde kernel (>= 5.4 < 5.4.05.44.21) • insyde kernel (>= 5.5 < 5.5.05.52.21)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References