cvedb.io
CVE-2023-22616
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2023-04-12T13:15:07.370 · Last modified 2026-06-17T05:35:44.537

Summary

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does not check the value of a save state register before use. Due to insufficient input validation, an attacker can corrupt SMRAM.

Affected products

insyde — insydeh2o

Does this affect you?

Add your gear to cvedb and we'll alert you only when insyde ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.