Lucene search
MitreCVELIST:CVE-2022-32267HistoryNov 14, 2022 - 12:00 a.m.
CVE-2022-32267
2022-11-1400:00:00
mitre
www.cve.org
4
vulnerability
smmresourcecheckdxe
smi handler
smram corruption
toctou attack
insyde engineering
kernel 5.2
kernel 5.3
kernel 5.4
kernel 5.5
DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack… This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046
Related
prion
prion
Design/Logic Flaw
2022-11-15 00:15:00
nvd
nvd
CVE-2022-32267
2022-11-15 00:15:11
cve
cve
CVE-2022-32267
2022-11-15 00:15:11
hp
hp
Insyde UEFI Firmware March 2023 Security Update (TOCTOU)
2023-03-21 00:00:00