CVE-2024-27353: High severity Insyde InsydeH2O kernel 5.2 vulnerability
A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27353?
CVE-2024-27353 is a critical memory corruption vulnerability that could lead to privilege escalation in SMM.
How do I fix CVE-2024-27353?
To fix CVE-2024-27353, you should update the InsydeH2O kernel to the latest version that is not affected by this vulnerability.
Which versions of Insyde InsydeH2O are affected by CVE-2024-27353?
CVE-2024-27353 affects InsydeH2O kernel versions 5.2 up to 05.29.09, 5.3 up to 05.38.09, 5.4 up to 05.46.09, 5.5 up to 05.54.09, and 5.6 up to 05.61.09.
What components are impacted by CVE-2024-27353?
CVE-2024-27353 impacts the SdHost and SdMmcDevice components within the Insyde InsydeH2O kernel.
Can CVE-2024-27353 be exploited remotely?
CVE-2024-27353 is primarily a local privilege escalation vulnerability, rather than a remote exploit.