CVE-2022-24351
First published: Sat Dec 16 2023(Updated: )
TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Insyde InsydeH2O | >=5.2<5.2.05.27.29 | |
| Insyde InsydeH2O | >=5.3<5.3.05.36.29 | |
| Insyde InsydeH2O | >=5.4<5.4.05.44.13 | |
| Insyde InsydeH2O | >=5.5<5.5.05.52.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-api
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/insyde
- canonical/insyde insydeh2o
- version/insyde insydeh2o/5.2
- version/insyde insydeh2o/5.3
- version/insyde insydeh2o/5.4
- version/insyde insydeh2o/5.5