CoreCVE
Back

HIGH

A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM

Published May 15, 2024

Description

A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-822

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 15, 2024
Updated Feb 13, 2025
Reserved Feb 25, 2024
Link CVE-2024-27353
CISA Vulnrichment
Updated May 15, 2024
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2024-27353
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-27353