CVE-2022-32266
First published: Mon Nov 14 2022(Updated: )
DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kernel 5.5: 05.52.23. Kernel 5.2 is unaffected. CWE-787 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the parameter buffer that is used by a software SMI handler (used by the PcdSmmDxe driver) could lead to a TOCTOU race-condition attack on the SMI handler, and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Insyde Kernel | >=5.3<5.3.05.36.23 | |
| Insyde Kernel | >=5.4<5.4.05.44.23 | |
| Insyde Kernel | >=5.5<5.5.05.52.23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-32266?
CVE-2022-32266 is a vulnerability that allows DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe, leading to a TOCTOU attack on the SMI handler and potential corruption of other ACPI fields and adjacent memory fields.
What is the severity of CVE-2022-32266?
CVE-2022-32266 has a severity score of 6.4, which is considered medium.
Which software versions are affected by CVE-2022-32266?
Insyde Kernel versions 5.3.05.36.23 to 5.5.05.52.23 are affected by CVE-2022-32266.
How can I mitigate CVE-2022-32266?
To mitigate CVE-2022-32266, it is recommended to apply the necessary security patches or updates provided by Insyde Kernel.
Where can I find more information about CVE-2022-32266?
You can find more information about CVE-2022-32266 on the Insyde security pledge page or the SA-2022045 advisory.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/insyde
- canonical/insyde kernel
- version/insyde kernel/5.3
- version/insyde kernel/5.4
- version/insyde kernel/5.5