8.8
CWE
787
Advisory Published
Updated

CVE-2022-29277

First published: Tue Nov 15 2022(Updated: )

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Amd Genoa Firmware<05.52.25.0006
Amd Genoa
Amd Hygon 1 Firmware<05.36.26.0016
Amd Hygon 1
Amd Hygon 2 Firmware<05.36.26.0016
Amd Hygon 2
Amd Hygon 3 Firmware<05.44.26.0007
Amd Hygon 3
Amd Milan Firmware<05.36.10.0017
Amd Milan
Amd Milan Firmware<05.36.26.0016
Amd Milan
Amd Rome Firmware<05.36.10.0017
AMD ROME
Amd Rome Firmware<05.36.26.0016
AMD ROME
Amd Ryzen 5300g Firmware<05.44.30.0004
Amd Ryzen 5300g
Amd Ryzen 5300ge Firmware<05.44.30.0004
Amd Ryzen 5300ge
Amd Ryzen 5600g Firmware<05.44.30.0004
Amd Ryzen 5600g
Amd Ryzen 5600ge Firmware<05.44.30.0004
Amd Ryzen 5600ge
Amd Ryzen 5600x Firmware<05.44.30.0004
Amd Ryzen 5600x
Amd Ryzen 5700g Firmware<05.44.30.0004
Amd Ryzen 5700g
Amd Ryzen 5700ge Firmware<05.44.30.0004
Amd Ryzen 5700ge
Amd Ryzen 5800x Firmware<05.44.30.0004
Amd Ryzen 5800x
Amd Ryzen 5800x3d Firmware<05.44.30.0004
Amd Ryzen 5800x3d
Amd Ryzen 5900x Firmware<05.44.30.0004
Amd Ryzen 5900x
Amd Ryzen 5950x Firmware<05.44.30.0004
Amd Ryzen 5950x
Amd Snowy Owl R1000 Firmware<05.32.50.0018
Amd Snowy Owl R1000
Amd Snowy Owl R2000 Firmware<05.44.30.0005
Amd Snowy Owl R2000
Amd Snowy Owl V2000 Firmware<05.44.30.0007
Amd Snowy Owl V2000
Amd Snowy Owl V3000 Firmware<05.44.30.0007
Amd Snowy Owl V3000
Intel Alder Lake Firmware<05.44.23.0047
Intel Alder Lake
Intel Bakerville Firmware<05.21.51.0026
Intel Bakerville
Intel Cedar Island Firmware<05.42.11.0021
Intel Cedar Island
Intel Idaville Firmware<05.43.12.0052
Intel Idaville
Intel Comet Lake-s Firmware<05.43.12.0052
Intel Comet Lake-s
Intel Tiger Lake H\/up3 Firmware<05.43.12.0052
Intel Tiger Lake H\/up3
Intel Whiskey Lake Firmware<05.43.12.0052
Intel Whiskey Lake
Intel Denverton Firmware<05.10.12.0042
Intel Denverton
Intel Eagle Stream Firmware<05.44.25.0052
Intel Eagle Stream
Intel Grangeville De Ns Firmware<05.27.26.0023
Intel Grangeville De Ns
Intel Granville De Firmware<05.05.15.0038
Intel Granville De
Intel Greenlow Firmware<05.10.12.0042
Intel Greenlow
Intel Greenlow-r Firmware<05.10.12.0042
Intel Greenlow-r
Intel Mehlow Firmware<05.10.12.0042
Intel Mehlow
Intel Mehlow-r Firmware<05.10.12.0042
Intel Mehlow-r
Intel Tatlow Firmware<05.10.12.0042
Intel Tatlow
Intel Purley-r Firmware<05.21.51.0048
INTEL Purley-R
Intel Whitley Firmware<05.42.23.0066
Intel Whitley

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203