← Back

CVE-2022-30771

nvd nist
Published: Nov 15, 2022Modified: Apr 30, 2025

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: NVD

Description

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in: Kernel 5.1: Version 05.17.25 Kernel 5.2: Version 05.27.25 Kernel 5.3: Version 05.36.25 Kernel 5.4: Version 05.44.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064

Affected (5)

Products: Insyde: Kernel
Insyde
1 product
Kernel
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Insyde
Kernel
From 5.1 to 5.1.05.17.25
Kernel
From 5.2 to 5.2.05.27.25
Kernel
From 5.3 to 5.3.05.36.25
Kernel
From 5.4 to 5.4.05.44.25
Kernel
From 5.5 to 5.5.05.52.25

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.