CVE-2022-29278 - CVE House
Back to Database
Status published Unknown CVE-2022-29278

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering...

Vulnerability Description

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version 05.17.23 Kernel 5.2: Version 05.27.23 Kernel 5.3: Version 05.36.23 Kernel 5.4: Version 05.44.23 Kernel 5.5: Version 05.52.23 https://www.insyde.com/security-pledge/SA-2022061

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29278

Credits & Attribution

No credits recorded in the NVD database.

References

More from insyde

View All →
CVE-2022-46897
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36448
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36338
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36337
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-35897
An stack buffer overflow vulnerability leads to arbitrary code execution...
Unknown 0

Affected Vendor

Affected Software

kernel
Vulnerable Versions:
5.1, 5.2, 5.3, 5.4, 5.5

Timeline

Official Publish: November 15th, 2022
Last Modified: April 30th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.