CVE-2022-32267

Severity Score

6.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack... This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046

Las transacciones DMA que están dirigidas a los búferes de entrada utilizados para el controlador SMI del software SmmResourceCheckDxe causan corrupción de SMRAM (un ataque TOCTOU) Las transacciones DMA que están dirigidas a los búferes de entrada utilizados para el controlador SMI del software utilizado por el controlador SmmResourceCheckDxe podrían causar corrupción de SMRAM a través de un ataque TOCTOU ... Este problema fue descubierto por la ingeniería de Insyde. Corregido en el kernel Kernel 5.2: 27.05.23. Núcleo 5.3: 36.05.23. Núcleo 5.4: 05.44.23. Núcleo 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046

*Credits: N/A

CVSS Scores

NISTv3.1 6.4

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-06-03 CVE Reserved
2022-11-14 CVE Published
2024-06-06 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.insyde.com/security-pledge	2022-11-18
https://www.insyde.com/security-pledge/SA-2022046	2022-11-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Insyde Search vendor "Insyde"		Kernel Search vendor "Insyde" for product "Kernel"				>= 5.2 < 5.2.05.27.23 Search vendor "Insyde" for product "Kernel" and version " >= 5.2 < 5.2.05.27.23"		-		Affected
Insyde Search vendor "Insyde"		Kernel Search vendor "Insyde" for product "Kernel"				>= 5.3 < 5.3.05.36.23 Search vendor "Insyde" for product "Kernel" and version " >= 5.3 < 5.3.05.36.23"		-		Affected
Insyde Search vendor "Insyde"		Kernel Search vendor "Insyde" for product "Kernel"				>= 5.4 < 5.4.05.44.23 Search vendor "Insyde" for product "Kernel" and version " >= 5.4 < 5.4.05.44.23"		-		Affected
Insyde Search vendor "Insyde"		Kernel Search vendor "Insyde" for product "Kernel"				>= 5.5 < 5.5.05.52.23 Search vendor "Insyde" for product "Kernel" and version " >= 5.5 < 5.5.05.52.23"		-		Affected