← Database

CVE-2022-24030

HIGH CVSS: 7.5 Published: 2022-02-03 Modified: 2026-08-11

Description

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Affected Platforms

Insyde Insydeh2O

Weakness Type

CWE-787

References