CVE-2022-32266

🗓️ 14 Nov 2022 22:15:13Reported by [email protected]Type

DMA attacks on parameter buffer used by SMI handler could lead to TOCTOU attack, corruption of ACPI fields and adjacent memory fields, requires detailed PCD database knowledge, discovered by Insyde engineering, fixed in Kernel 5.3, Kernel 5.4, Kernel 5.5, unaffected on Kernel 5.2. Insyde InsydeH2O with Kernel 5.0 through 5.5 affected by similar issu

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-32266	16 Nov 202207:54	–	circl
CNNVD	Insyde InsydeH2O 缓冲区错误漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2022-32266	14 Nov 202200:00	–	cve
Cvelist	CVE-2022-32266	14 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-53463	3 Oct 202520:07	–	euvd
Hewlett-Packard	Insyde UEFI Firmware March 2023 Security Update (TOCTOU)	21 Mar 202300:00	–	hp
OSV	CVE-2022-32266	14 Nov 202222:15	–	osv
Prion	Race condition	14 Nov 202222:15	–	prion
Positive Technologies	PT-2022-21191 · Insyde · Insydeh2O	14 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-32266	23 May 202501:12	–	redhatcve