Security Advisory
CVE-2023-22612
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.