CVE-2022-33984

low-risk
Published 2022-11-15

DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDevice driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. This was fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022054

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.0/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Insyde

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022054
https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
Vendor Advisory https://www.insyde.com/security-pledge
Vendor Advisory https://www.insyde.com/security-pledge/SA-2022054
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal