CVE-2022-30771: Insyde Kernel
High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.
Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in: Kernel 5.1: Version 05.17.25 Kernel 5.2: Version 05.27.25 Kernel 5.3: Version 05.36.25 Kernel 5.4: Version 05.44.25 Kernel 5.5: Version 05.52.25 https://www.insyde.com/security-pledge/SA-2022064
Affected products
- Insyde Kernel: from 5.1, before 5.1.05.17.25 (fixed in 5.1.05.17.25); from 5.2, before 5.2.05.27.25 (fixed in 5.2.05.27.25); from 5.3, before 5.3.05.36.25 (fixed in 5.3.05.36.25); from 5.4, before 5.4.05.44.25 (fixed in 5.4.05.44.25); from 5.5, before 5.5.05.52.25 (fixed in 5.5.05.52.25)
Published 2022-11-15. Last modified 2026-06-17.