KE
Product
Kernel
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 18Medium 14Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36337 | 8.2 | Nov 23 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 Affected: 5.0 through 5.5 |
| CVE-2022-29279 | 8.2 | Nov 15 | Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in… Affected: 5.0 before 5.0.05.09.17; 5.1 before 5.1.05.17.17; 5.2 before 5.2.05.27.17; 5.3 before 5.3.05.36.17; 5.4 before 5.4.05.44.17; 5.5 before 5.5.05.52.17 |
| CVE-2022-29278 | 8.2 | Nov 15 | Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering… Affected: 5.1 before 5.1.05.17.23; 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23 |
| CVE-2022-29276 | 8.2 | Nov 15 | SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM Affected: 5.0 before 5.0.05.09.18; 5.1 before 5.1.05.17.18; 5.2 before 5.2.05.27.18; 5.3 before 5.3.05.36.18; 5.4 before 5.4.05.44.18; 5.5 before 5.5.05.52.18 |
| CVE-2022-30772 | 8.2 | Nov 15 | Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory Affected: 5.0 before 5.0.05.09.41; 5.1 before 5.1.05.17.43; 5.2 before 5.2.05.27.30; 5.3 before 5.3.05.36.30; 5.4 before 5.4.05.44.30; 5.5 before 5.5.05.52.30 |
| CVE-2022-30771 | 8.2 | Nov 15 | Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when… Affected: 5.1 before 5.1.05.17.25; 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25 |
| CVE-2022-29275 | 8.2 | Nov 15 | In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges Affected: 5.0 through 5.0.05.09.21; 5.1 before 5.1.05.17.21; 5.2 before 5.2.05.27.21; 5.3 before 5.3.05.36.21; 5.4 before 5.4.05.44.21; 5.5 before 5.5.05.52.21 |
| CVE-2021-38575 | 8.1 | Dec 1 | NetworkPkg/IScsiDxe has remotely exploitable buffer overflows Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5 |
| CVE-2024-52880 | 7.9 | May 15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version… Affected: 5.2 before 5.29.50; 5.3 before 5.38.50; 5.4 before 5.46.50; 5.5 before 5.54.50; 5.6 before 5.61.50; 5.7 before 5.70.50 |
| CVE-2022-35407 | 7.8 | Nov 22 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 Affected: 5.0 through 5.5 |
| CVE-2022-30283 | 7.5 | Nov 15 | In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an… Affected: 5.0 before 5.0.05.09.21; 5.1 before 5.1.05.17.21; 5.2 before 5.2.05.27.21; 5.3 before 5.3.05.36.21; 5.4 before 5.4.05.44.21; 5.5 before 5.5.05.52.21 |
| CVE-2024-25078 | 7.4 | May 15 | A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4:… Affected: 5.2 before 5.29.07; 5.3 before 5.38.07; 5.4 before 5.46.07; 5.5 before 5.54.07; 5.6 before 5.61.07 |
| CVE-2022-33985 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack Affected: 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25 |
| CVE-2022-33984 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack Affected: 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25 |
| CVE-2022-33983 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack Affected: 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25 |
| CVE-2022-33909 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack Affected: 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23 |
| CVE-2022-33908 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack Affected: 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25 |
| CVE-2022-33905 | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attack) Affected: 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23 |
Showing 18