PT-2022-21191 · Insyde · Insydeh2O

Published 2022-11-14 · Updated 2025-04-30 · CVE-2022-32266

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O versions 5.0 through 5.5 Insyde InsydeH2O Kernel 5.3 version 05.36.23 Insyde InsydeH2O Kernel 5.4 version 05.44.23 Insyde InsydeH2O Kernel 5.5 version 05.52.23

Description The issue arises from DMA attacks on the parameter buffer used by a software SMI handler in the PcdSmmDxe driver, potentially leading to a TOCTOU attack on the SMI handler. This could result in corruption of other ACPI fields and adjacent memory fields. The attack requires detailed knowledge of the PCD database contents on the current platform.

Recommendations For Insyde InsydeH2O versions 5.0 through 5.2, update to Kernel 5.3 version 05.36.23 or later. For Insyde InsydeH2O Kernel 5.3 versions prior to 05.36.23, update to version 05.36.23 or later. For Insyde InsydeH2O Kernel 5.4 versions prior to 05.44.23, update to version 05.44.23 or later. For Insyde InsydeH2O Kernel 5.5 versions prior to 05.52.23, update to version 05.52.23 or later. As a temporary workaround, consider restricting access to the PcdSmmDxe driver until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-32266

Affected Products

Insydeh2O

References · 7

• https://insyde.com/security-pledge/SA-2022045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32266 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32266 · Vendor Advisory
• https://insyde.com/security-pledge · Vendor Advisory
• https://t.me/cvenotify/37673 · Telegram Post
• https://t.me/cvenotify/120374 · Telegram Post
• https://t.me/cibsecurity/52984 · Telegram Post