CVE-2022-30774: Medium severity insyde kernel vulnerability
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) . This issue was discovered by Insyde engineering during a security review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.25. CWE-367 https://www.insyde.com/security-pledge/SA-2022043
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30774?
CVE-2022-30774 is a vulnerability that allows DMA attacks on the parameter buffer used by the PnpSmm driver, which can change the contents after parameter values have been checked but before they are used.
What is the severity of CVE-2022-30774?
The severity of CVE-2022-30774 is medium, with a CVSS score of 6.4.
Which software is affected by CVE-2022-30774?
The affected software is Insyde Kernel versions 5.2 to 5.5.
How can DMA attacks be mitigated for CVE-2022-30774?
To mitigate DMA attacks for CVE-2022-30774, it is recommended to apply the necessary security patches provided by Insyde.
Where can I find more information about CVE-2022-30774?
More information about CVE-2022-30774 can be found in the references provided: [SSA-450613.pdf](https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf), [Insyde Security Pledge](https://www.insyde.com/security-pledge), [SA-2022043](https://www.insyde.com/security-pledge/SA-2022043).