Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-39284

No fix known EPSS <1%

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler.

Published 2023-11-02 · CVE record · OSV

Products: insydeh2o