cvedb.io
CVE-2022-32267
MEDIUM · CVSS 6.4
EPSS exploitation probability: 0%
Published 2022-11-15T00:15:11.610 · Last modified 2026-06-17T04:47:01.497

Summary

DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack... This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046

Affected products

insyde — kernel

Does this affect you?

Add your gear to cvedb and we'll alert you only when insyde ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.