VULNERABILITY INTELLIGENCE

CVE-2022-29279

CVSS score8.2 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2022-11-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.17 Kernel 5.1: version 05.17.17 Kernel 5.2: version 05.27.17 Kernel 5.3: version 05.36.17 Kernel 5.4: version 05.44.17 Kernel 5.5: version 05.52.17 https://www.insyde.com/security-pledge/SA-2022062

Weakness classification

  • nvd@nist.gov: CWE-119
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-119

Primary references