Insyde's Security Pledge
Recent Security Advisories

INSYDE-SA-2022062
Product
CVSS Score
Original Date
Last Revised
InsydeH2O
7.5
2022-11-14
Summary
Use of an untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice.
Vulnerability Details
CVSS Vector: CVSS3.1:AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Use of an untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in:
Solution Information
Kernel 5.0: version 05.09.17
Kernel 5.1: version 05.17.17
Kernel 5.2: version 05.27.17
Kernel 5.3: version 05.36.17
Kernel 5.4: version 05.44.17
Kernel 5.5: version 05.52.17
Acknowledgements
Revision History
Revision #
Date
Description
1
2022-11-14
Initial Release