CVE-2022-29275 - Vulnerability Details - OpenCVE

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Insyde	Kernel

Configuration 1 [-]

OR	cpe:2.3:o:insyde:kernel::::::::
	cpe:2.3:o:insyde:kernel::::::::
	cpe:2.3:o:insyde:kernel::::::::
	cpe:2.3:o:insyde:kernel::::::::
	cpe:2.3:o:insyde:kernel::::::::
	cpe:2.3:o:insyde:kernel::::::::

No data.

References

Link	Providers
https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2022058

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-11-15T00:00:00

Updated: 2024-08-03T06:17:54.568Z

Reserved: 2022-04-15T00:00:00

Link: CVE-2022-29275

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-11-15T21:15:36.607

Modified: 2024-11-21T06:58:51.080

Link: CVE-2022-29275

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A9A1C53-7B00-477D-B8AA-6B1A8EB1DAA5", "versionEndIncluding": "5.0.05.09.21", "versionStartIncluding": "5.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6606DD2A-0C65-4D84-B301-313850F7A631", "versionEndExcluding": "5.1.05.17.21", "versionStartIncluding": "5.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B66937EE-AE21-45AD-8FE1-2580A5CD23B1", "versionEndExcluding": "5.2.05.27.21", "versionStartIncluding": "5.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "23089DD9-DF12-4732-B201-D1EBDBB1D53A", "versionEndExcluding": "5.3.05.36.21", "versionStartIncluding": "5.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4996E78F-CF7A-49A7-86D8-99904B50CBE2", "versionEndExcluding": "5.4.05.44.21", "versionStartIncluding": "5.4", "vulnerable": true}, {"criteria": "cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DF5BB25-36A1-49C2-8AFB-A78E18A322ED", "versionEndExcluding": "5.5.05.52.21", "versionStartIncluding": "5.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058"}, {"lang": "es", "value": "En UsbCoreDxe, la entrada que no es de confianza puede permitir la manipulaci\u00f3n de la memoria SMRAM o del Sistema Operativo. El uso de punteros que no son de confianza podr\u00eda permitir la manipulaci\u00f3n de la memoria SMRAM o del Sistema Operativo, lo que lleva a una escalada de privilegios. Insyde descubri\u00f3 este problema durante la revisi\u00f3n de seguridad. Se solucion\u00f3 en: Kernel 5.0: versi\u00f3n 05.09.21 Kernel 5.1: versi\u00f3n 05.17.21 Kernel 5.2: versi\u00f3n 05.27.21 Kernel 5.3: versi\u00f3n 05.36.21 Kernel 5.4: versi\u00f3n 05.44.21 Kernel 5.5: versi\u00f3n 05.52.21https:/ /www.insyde.com/security-pledge/SA-2022058"}], "id": "CVE-2022-29275", "lastModified": "2024-11-21T06:58:51.080", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-11-15T21:15:36.607", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.insyde.com/security-pledge"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.insyde.com/security-pledge/SA-2022058"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.insyde.com/security-pledge"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.insyde.com/security-pledge/SA-2022058"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}