CVE-2021-43615

CVE-2021-43615 affects Insyde InsydeH2O HddPassword in kernel 5.x (before 05.16.23, 05.26.23, 05.35.23, 05.43.22, 05.51.22). It is a SMM memory corruption vulnerability allowing an attacker to write fixed or predictable data to SMRAM, enabling privilege escalation to System Management Mode (SMM)....

CVE-2021-43615

An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting thi...