CVE-2024-27353

The Insyde InsydeH2O firmware contains a memory corruption vulnerability (specifically an Untrusted Pointer Dereference ) within the SdHost and SdMmcDevice components. This flaw can lead to escalating privileges in SMM (System Management Mode). Affected versions include kernels 5.2 before 05.29.0...