CVE-2021-41842
First published: Wed Jan 05 2022(Updated: )
An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Insyde InsydeH2O | >=5.0<05.08.46 | |
| Insyde InsydeH2O | >=5.1<05.16.46 | |
| Insyde InsydeH2O | >=5.2<05.26.46 | |
| Insyde InsydeH2O | >=5.3<05.35.46 | |
| Insyde InsydeH2O | >5.4<05.43.46 | |
| Insyde InsydeH2O | >=5.5<05.51.45 | |
| >=5.0<05.08.46 | ||
| >=5.1<05.16.46 | ||
| >=5.2<05.26.46 | ||
| >=5.3<05.35.46 | ||
| >5.4<05.43.46 | ||
| >=5.5<05.51.45 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-41842?
CVE-2021-41842 is a vulnerability discovered in AtaLegacySmm in the Insyde InsydeH2O kernel versions 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45.
What is the severity of CVE-2021-41842?
The severity of CVE-2021-41842 is critical, with a CVSS score of 9.8.
How does code execution occur in CVE-2021-41842?
Code execution can occur in CVE-2021-41842 because the SMI handler lacks a CommBuffer check.
Which software versions are affected by CVE-2021-41842?
The affected software versions of CVE-2021-41842 are Insyde InsydeH2O 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45.
Where can I find more information about CVE-2021-41842?
More information about CVE-2021-41842 can be found at the following references: [link1], [link2].
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/insyde
- canonical/insyde insydeh2o
- version/insyde insydeh2o/5.0
- version/insyde insydeh2o/5.1
- version/insyde insydeh2o/5.2
- version/insyde insydeh2o/5.3
- version/insyde insydeh2o/5.5