Unscored CVE-2021-41842 EUVD-2021-28843GHSA-v6qx-c5rh-4q6q

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5…

Published Jan 5, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check.

References

https://www.insyde.com/security-pledge
https://security.netapp.com/advisory/ntap-20220223-0002/