CVE-2022-38087 | Vulnetix

CVE-2022-38087 PUBLISHED

BRLY-2022-028 Medium CVE-2022-38087 BINARLY efiXplorer team discovered that most enterprise vendors are affected by not correctly applying the Return Stack Buffer (RSB) stuffing mitigation logic before resuming from SMM (RSM instruction).

EPSS 0.18% · 7.0th percentile

Risk Scores

EPSS Score

0.18%

7.0th percentile

Timeline

Aug 15, 2022 CVE Published
May 11, 2023 EPSS Score
Jun 17, 2023 EPSS Score
Jul 24, 2023 EPSS Score
Aug 30, 2023 EPSS Score
Oct 6, 2023 EPSS Score
Nov 12, 2023 EPSS Score
Dec 19, 2023 EPSS Score
Jan 25, 2024 EPSS Score
Mar 1, 2024 EPSS Score
Apr 7, 2024 EPSS Score
May 14, 2024 EPSS Score

References

Absence or incomplete applying the Return Stack Buffer (RSB) stuffing mitigation logic before resuming from SMM advisory
Absence or incomplete applying the Return Stack Buffer (RSB) stuffing mitigation logic before resuming from SMM advisory

Open in Interactive Console →