CVEvulnerability
CVE-2022-30771
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in: Kernel 5.1: Version 05.17.25 Kernel 5.2: Version 05.27.25 Kernel 5.3: Version 05.36.25 Kernel 5.4: Version 05.44.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064
Affected configurations
• insyde kernel (>= 5.1 < 5.1.05.17.25)
• insyde kernel (>= 5.2 < 5.2.05.27.25)
• insyde kernel (>= 5.3 < 5.3.05.36.25)
• insyde kernel (>= 5.4 < 5.4.05.44.25)
• insyde kernel (>= 5.5 < 5.5.05.52.25)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.insyde.com/security-pledge Vendor Advisory
- https://www.insyde.com/security-pledge/SA-2022064 Vendor Advisory
- https://www.insyde.com/security-pledge Vendor Advisory
- https://www.insyde.com/security-pledge/SA-2022064 Vendor Advisory