CVE-2022-30773

Name of the Vulnerable Software and Affected Versions IhisiSmm driver versions prior to Kernel 5.4: 05.44.23 IhisiSmm driver versions prior to Kernel 5.5: 05.52.23

Description The issue allows DMA attacks on the parameter buffer used by the IhisiSmm driver to change the contents after parameter values have been checked but before they are used, which is a Time-of-Check-to-Time-of-Use (TOCTOU) attack. This was discovered by Insyde engineering.

Recommendations For versions prior to Kernel 5.4: 05.44.23, update to Kernel 5.4: 05.44.23 or later. For versions prior to Kernel 5.5: 05.52.23, update to Kernel 5.5: 05.52.23 or later.