CVE-2022-32267: Medium severity insyde kernel vulnerability
DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack... This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32267?
The severity of CVE-2022-32267 is medium with a CVSS score of 6.4.
How does CVE-2022-32267 affect the Insyde Kernel software?
CVE-2022-32267 affects the Insyde Kernel software versions 5.2 to 5.5.
What is the impact of CVE-2022-32267?
CVE-2022-32267 can cause SMRAM corruption, resulting in a TOCTOU (Time of Check, Time of Use) attack.
How can I mitigate CVE-2022-32267?
To mitigate CVE-2022-32267, it is recommended to install the patches provided by Insyde or contact the vendor for further instructions.
Where can I find more information about CVE-2022-32267?
More information about CVE-2022-32267 can be found on the Insyde Security Pledge website or in the SA-2022046 advisory.