CVSS: 8.2EPSS: 0%CPEs: 6EXPL: 0CVE-2022-24069
https://notcve.org/view.php?id=CVE-2022-24069
02 Feb 2022 — An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35.29, 5.4 before 05.43.29, and 5.5 before 05.51.29. An SMM callout vulnerability allows an attacker to hijack the execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM. Se ha detectado un problema en AhciBusDxe en InsydeH2O con el kernel versión 5.0 anteriores a 05.08.41, versiones 5.1 anterior... • https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf •
CVSS: 9.8EPSS: 1%CPEs: 6EXPL: 0CVE-2021-41842
https://notcve.org/view.php?id=CVE-2021-41842
05 Jan 2022 — An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check. Se ha detectado un problema en AtaLegacySmm en el kernel 5.0 anteriores a 05.08.46, 5.1 anteriores a 05.16.46, 5.2 anteriores a 05.26.46, 5.3 anteriores a 05.35.46, 5.4 anteriores a 05.43.46 y 5.5 anteriores a 05.51.45 en InsydeH2O. ... • https://security.netapp.com/advisory/ntap-20220223-0002 •