medium5.5
CVE-2023-27373
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
Impact
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Insyde | Insydeh2o | Versions 5.0, 5.1, 5.2, 5.3, 5.4, 5.5 |