Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2022-29278

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version 05.17.23 Kernel 5.2: Version 05.27.23 Kernel 5.3: Version 05.36.23 Kernel 5.4: Version 05.44.23 Kernel 5.5: Version 05.52.23 https://www.insyde.com/security-pledge/SA-2022061

  • Published: Nov 15, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-29278
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.2
  • AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
insyde / kernel 5.1 5.1.05.17.23
insyde / kernel 5.2 5.2.05.27.23
insyde / kernel 5.3 5.3.05.36.23
insyde / kernel 5.4 5.4.05.44.23
insyde / kernel 5.5 5.5.05.52.23