VYPR
Unrated severityNVD Advisory· Published Nov 15, 2022· Updated Apr 30, 2025

CVE-2022-29275

CVE-2022-29275

Description

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Insyde/UsbCoreDxedescription
  • Insyde/BIOSllm-fuzzy
    Range: Kernel 5.0 < 05.09.21, 5.1 < 05.17.21, 5.2 < 05.27.21, 5.3 < 05.36.21, 5.4 < 05.44.21, 5.5 < 05.52.21

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

2

News mentions

0

No linked articles in our index yet.