CVE-2022-29277
Description
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060
How to fix
- amd genoa_firmware05.52.25.0006 or later
- amd hygon_1_firmware05.36.26.0016 or later
- amd hygon_2_firmware05.36.26.0016 or later
- amd hygon_3_firmware05.44.26.0007 or later
- amd milan_firmware05.36.10.0017, 05.36.26.0016 or later
- amd rome_firmware05.36.10.0017, 05.36.26.0016 or later
- amd ryzen_5300g_firmware05.44.30.0004 or later
- amd ryzen_5300ge_firmware05.44.30.0004 or later
- amd ryzen_5600g_firmware05.44.30.0004 or later
- amd ryzen_5600ge_firmware05.44.30.0004 or later
- amd ryzen_5600x_firmware05.44.30.0004 or later
- amd ryzen_5700g_firmware05.44.30.0004 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd genoa_firmware | v < 05.52.25.0006 | 05.52.25.0006 |
| amd hygon_1_firmware | v < 05.36.26.0016 | 05.36.26.0016 |
| amd hygon_2_firmware | v < 05.36.26.0016 | 05.36.26.0016 |
| amd hygon_3_firmware | v < 05.44.26.0007 | 05.44.26.0007 |
| amd milan_firmware | v < 05.36.10.0017, v < 05.36.26.0016 | 05.36.10.0017, 05.36.26.0016 |
| amd rome_firmware | v < 05.36.10.0017, v < 05.36.26.0016 | 05.36.10.0017, 05.36.26.0016 |
| amd ryzen_5300g_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5300ge_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5600g_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5600ge_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5600x_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5700g_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5700ge_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5800x_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5800x3d_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5900x_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd ryzen_5950x_firmware | v < 05.44.30.0004 | 05.44.30.0004 |
| amd snowy_owl_r1000_firmware | v < 05.32.50.0018 | 05.32.50.0018 |
| amd snowy_owl_r2000_firmware | v < 05.44.30.0005 | 05.44.30.0005 |
| amd snowy_owl_v2000_firmware | v < 05.44.30.0007 | 05.44.30.0007 |
| amd snowy_owl_v3000_firmware | v < 05.44.30.0007 | 05.44.30.0007 |
| intel alder_lake_firmware | v < 05.44.23.0047 | 05.44.23.0047 |
| intel bakerville_firmware | v < 05.21.51.0026 | 05.21.51.0026 |
| intel cedar_island_firmware | v < 05.42.11.0021 | 05.42.11.0021 |
| intel idaville_firmware | v < 05.43.12.0052 | 05.43.12.0052 |
| intel comet_lake-s_firmware | v < 05.43.12.0052 | 05.43.12.0052 |
| intel tiger_lake_h\/up3_firmware | v < 05.43.12.0052 | 05.43.12.0052 |
| intel whiskey_lake_firmware | v < 05.43.12.0052 | 05.43.12.0052 |
| intel denverton_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel eagle_stream_firmware | v < 05.44.25.0052 | 05.44.25.0052 |
| intel grangeville_de_ns_firmware | v < 05.27.26.0023 | 05.27.26.0023 |
| intel granville_de_firmware | v < 05.05.15.0038 | 05.05.15.0038 |
| intel greenlow_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel greenlow-r_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel mehlow_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel mehlow-r_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel tatlow_firmware | v < 05.10.12.0042 | 05.10.12.0042 |
| intel purley-r_firmware | v < 05.21.51.0048 | 05.21.51.0048 |
| intel whitley_firmware | v < 05.42.23.0066 | 05.42.23.0066 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.