Description
An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler.
Advisories 1
- WID-SEC-2024-0609 Insyde UEFI Firmware und Lenovo BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 12, 2024