CVE-2021-45969: High severity Insyde InsydeH2O vulnerability
An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45969?
CVE-2021-45969 is classified with a high severity due to its potential impact on SMM (System Management Mode) operations.
How do I fix CVE-2021-45969?
To mitigate CVE-2021-45969, update the InsydeH2O BIOS to versions 5.16.25, 5.26.25, 5.35.25, 5.43.25, or 5.51.25 or later.
What are the affected versions by CVE-2021-45969?
CVE-2021-45969 affects InsydeH2O BIOS versions prior to 5.16.25, 5.26.25, 5.35.25, 5.43.25, and 5.51.25.
What type of vulnerability is CVE-2021-45969?
CVE-2021-45969 is a vulnerability within the SMM branch of the InsydeH2O BIOS.
Who is affected by CVE-2021-45969?
Users of InsydeH2O UEFI BIOS versions listed prior to the secure updates are vulnerable to CVE-2021-45969.