PT-2022-11493 · Insyde · Insydeh2O

Published 2022-02-03 · Updated 2022-03-01 · CVE-2021-41837

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.0 through 5.5

Description An issue was discovered in AhciBusDxe due to an Untrusted Pointer Dereference, causing SMM memory corruption. This allows an attacker to write fixed or predictable data to SMRAM, potentially leading to escalating privileges to SMM. The vulnerability exists in the SMM branch that registers a SWSMI handler, where an attacker can use an unsafe pointer to read, write, or manipulate data into SMRAM.

Recommendations For kernel versions 5.0 through 5.5, consider disabling the SWSMI handler as a temporary workaround to minimize the risk of exploitation. Restrict access to the AhciBusDxe module to prevent potential attacks. Avoid using the current ptr pointer in the affected SMM branch until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2021-41837

Affected Products

Insydeh2O

References · 9

• https://insyde.com/security-pledge/SA-2022024 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41837 · Vendor Advisory
• https://insyde.com/security-pledge · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41837 · Security Note
• https://t.me/cibsecurity/36748 · Telegram Post
• https://t.me/cvenotify/26534 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://security.netapp.com/advisory/ntap-20220222-0003 · Note
• https://kb.cert.org/vuls/id/796611 · Note