Insyde's Security Pledge

AtaLegacySmm: SMI handler does not check CommBuffer leading to possible arbitrary code execution.

CVSS Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2021-41842

This corresponds to CVE-2021-41842 It affects the driver AtaLegacySmm. This issue was discovered by an external researcher. It was fixed in the following versions:

Kernel 5.0: 05.08.46
Kernel 5.1: 05.16.46
Kernel 5.2: 05.26.46
Kernel 5.3: 05.35.46
Kernel 5.4: 05.43.46
Kernel 5.5: 05.51.45.