CVE-2024-25078

A memory corruption vulnerability exists in the StorageSecurityCommandDxe component of Insyde InsydeH2O firmware. This flaw could lead to escalating privileges in SMM . Affected versions include those prior to kernel 5.2 (IB19130163 in 05.29.07), kernel 5.3 (IB19130163 in 05.38.07), kernel 5.4 (I...