CVE-2022-32473

CVE-2022-32473 affects InsydeH2O firmware (kernel 5.0–5.5). The issue is a TOCTOU race condition in a DMA path where the HddPassword shared buffer is accessed by SMM and non-SMM code, risking SMRAM corruption and privilege escalation. The underlying vulnerability arises from timing when the firmw...

CVE-2022-32953

CVE-2022-32953 affects Insyde InsydeH2O BIOS (kernel 5.0–5.5). DMA-based TOCTOU on the SdHostDriver buffer in SMM and non-SMM code could corrupt SMRAM and escalate privileges. Mitigations per the sources include enabling IOMMU protection for the ACPI runtime memory used for the command buffer and...

CVE-2022-32470

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using...

PT-2023-13222

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with kernel 5.1 through 5.5 Description An issue was discovered in Insyde InsydeH2O that could cause TOCTOU race-condition issues due to DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code, potentially leading t...

CVE-2022-32470: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using...

PT-2023-13221

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with kernel 5.0 through 5.5 Description An issue was discovered in Insyde InsydeH2O that could cause TOCTOU race-condition issues due to DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code, potentially leading ...

CVE-2022-32477

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated...

CVE-2022-32478

CVE-2022-32478 concerns InsydeH2O firmware (kernel 5.0–5.5). A DMA-driven TOCTOU race in the IdeBusDxe shared buffer used by SMM and non-SMM code could lead to SMRAM corruption and privilege escalation. Documented mitigations include enabling IOMMU protection for the ACPI runtime memory that back...

PT-2023-13223

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O versions 5.0 through 5.5 Description An issue was discovered in Insyde InsydeH2O that could cause TOCTOU race-condition issues due to DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code, potentially leading to...

CVE-2022-32954: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...

CVE-2022-32475

CVE-2022-32475 concerns Insyde InsydeH2O (kernel 5.0–5.5). DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM code can trigger a TOCTOU race condition, potentially causing SMRAM corruption and privilege escalation. The issue is noted to be fixed in the kernel, which also ...

CVE-2022-32469

CVE-2022-32469 affects Insyde InsydeH2O BIOS (kernel 5.0–5.5). It describes a TOCTOU race condition in the PnpSmm shared buffer used by SMM and non-SMM code, which could enable SMRAM corruption and privilege escalation. The advisory notes mitigations: (1) enable IOMMU protection for the ACPI runt...

CVE-2022-32471: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and output data. By modifying the command buffer contents with DMA after the input parameters have been checked but before they are used, the IHISI SMM co...

CVE-2022-32476

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the AhciBusDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using IOMMU...

CVE-2022-32469: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using IOMMU...

CVE-2022-32955: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...

CVE-2022-32953: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...

CVE-2022-32475

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This issue was fixed in the kerne...

CVE-2022-32470

CVE-2022-32470 affects Insyde InsydeH2O BIOS (kernel 5.0–5.5). A TOCTOU race condition in the FwBlockServiceSmm shared buffer (used by SMM and non-SMM code) could lead to SMRAM corruption and privilege escalation. Documented mitigations include using IOMMU protection for the ACPI runtime memory u...

CVE-2022-32473: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the HddPassword shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated using IOMMU...