CVE-2021-41842: Critical severity insyde h2o vulnerability
An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-41842?
CVE-2021-41842 is a vulnerability discovered in AtaLegacySmm in the Insyde InsydeH2O kernel versions 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45.
What is the severity of CVE-2021-41842?
The severity of CVE-2021-41842 is critical, with a CVSS score of 9.8.
How does code execution occur in CVE-2021-41842?
Code execution can occur in CVE-2021-41842 because the SMI handler lacks a CommBuffer check.
Which software versions are affected by CVE-2021-41842?
The affected software versions of CVE-2021-41842 are Insyde InsydeH2O 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45.
Where can I find more information about CVE-2021-41842?
More information about CVE-2021-41842 can be found at the following references: [link1], [link2].