CVE-2022-33907

low-risk
Published 2022-11-14

DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack... DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25 https://www.insyde.com/security-pledge/SA-2022049

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.4/10 Medium
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Insyde

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022049
https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022049
22
/ 100
low-risk
Severity 17/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal