CVE-2024-25079

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.2 through 5.2 before 05.29.09 Insyde InsydeH2O kernel versions 5.3 through 5.3 before 05.38.09 Insyde InsydeH2O kernel versions 5.4 through 5.4 before 05.46.09 Insyde InsydeH2O kernel versions 5.5 through 5.5 before 05.54.09 Insyde InsydeH2O kernel versions 5.6 through 5.6 before 05.61.09

Description A memory corruption vulnerability in HddPassword could lead to escalating privileges in SMM.

Recommendations For Insyde InsydeH2O kernel version 5.2 before 05.29.09, update to version 05.29.09 or later. For Insyde InsydeH2O kernel version 5.3 before 05.38.09, update to version 05.38.09 or later. For Insyde InsydeH2O kernel version 5.4 before 05.46.09, update to version 05.46.09 or later. For Insyde InsydeH2O kernel version 5.5 before 05.54.09, update to version 05.54.09 or later. For Insyde InsydeH2O kernel version 5.6 before 05.61.09, update to version 05.61.09 or later.