CVE-2022-33906

low-risk
Published 2022-11-15

DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the FwBlockServiceSmm driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.23, 5.3: 05.36.23, 5.4: 05.44.23, 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022048

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.4/10 Medium
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Insyde

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022048
https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022048
22
/ 100
low-risk
Severity 17/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal