CVE-2022-30774
6.4MEDIUMDMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter
게시됨: 11/15/2022업데이트됨: 4/30/2025
설명
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) . This issue was discovered by Insyde engineering during a security review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.25. CWE-367 https://www.insyde.com/security-pledge/SA-2022043
AI 분석AI 기반
영향받는 제품
insydekernel
insydekernel
insydekernel
insydekernel
참조
- https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
- https://www.insyde.com/security-pledgeVendor Advisory
- https://www.insyde.com/security-pledge/SA-2022043Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
- https://www.insyde.com/security-pledgeVendor Advisory
- https://www.insyde.com/security-pledge/SA-2022043Vendor Advisory