CVE-2024-55567: Input Validation
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55567?
CVE-2024-55567 has a high severity due to its potential for memory manipulation and unauthorized execution.
How do I fix CVE-2024-55567?
To mitigate CVE-2024-55567, update InsydeH2O kernel to versions 5.47.01, 5.55.01, 5.62.01, or 5.71.01 or later.
What are the potential impacts of CVE-2024-55567?
CVE-2024-55567 can lead to arbitrary memory writes and execution of unauthorized code, compromising system integrity.
Which versions of InsydeH2O are affected by CVE-2024-55567?
CVE-2024-55567 affects InsydeH2O kernel versions prior to 5.47.01, 5.55.01, 5.62.01, and 5.71.01.
What is the nature of the vulnerability in CVE-2024-55567?
CVE-2024-55567 is an improper input validation vulnerability located in the UsbCoreDxe module.