CVE-2022-29264

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-29264

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29264.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-29264

Downstream

Published

2022-04-25T06:11:03Z

Modified

2026-10-21T08:19:47Z

Summary

[none]

Details

An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29264.json"
}

References

Affected packages

Git / github.com/coreboot/coreboot

Affected ranges

Type

GIT

Repo

https://github.com/coreboot/coreboot

Events

Introduced

5c186c6777c9438ff4681929c9c25c98dee28bef

Fixed

afb7a814783cda12f5b72167163b9109ee1d15a7

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "4.13"
                },
                {
                    "last_affected":  "4.16"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "range":  [
                {
                    "fixed":  "afb7a814783cda12f5b72167163b9109ee1d15a7"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29264.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "128575577005731980589740632723487903164",
            "length":  538
        },
        "id":  "CVE-2022-29264-2971020e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7",
        "target":  {
            "file":  "src/cpu/x86/mp_init.c",
            "function":  "install_permanent_handler"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "98459366258483337805364138740688977009",
            "length":  683
        },
        "id":  "CVE-2022-29264-3288494d",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7",
        "target":  {
            "file":  "src/cpu/x86/mp_init.c",
            "function":  "smm_do_relocation"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "35645133501384282570521901333486145167",
                "151290315585692541738969716709603571316",
                "48320792950577183154187947830928288134",
                "270527563524657892919012897142563712735",
                "88813629274718106973778812557606071809",
                "199665096297793167864241483894222025518",
                "185537591994867884956960396982237618353",
                "131659472089692029876077805684235576492",
                "33700556993192969944658016361717878550",
                "25176569817866879643772106855817728070",
                "78051791487479455196377462287451810886",
                "143546399814470718437118138983490309676",
                "23345994977228573864369241659579302569",
                "216719446043853498708302567163270018433",
                "69447893543616353727114016203207656136",
                "295737040048173090956080232675952849053",
                "280472890988324734545684933152454172032",
                "70200325097880358479948839676291129553",
                "334405423578833333529602803151617393987",
                "157877938437061828007167347331649396035",
                "266988113152440169371868198345461756507",
                "39364701616177399371760116077984908056",
                "235686689655380275806040068742739034910",
                "265573673252069409202630375987790349512",
                "122923195408240341371683148674661941128"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-29264-4b65b5b1",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7",
        "target":  {
            "file":  "src/cpu/x86/mp_init.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "42350932828299993187122297171436549231",
                "153453698251613414451689210006447954414",
                "216733947301042555361289952374733447705",
                "135026109149054783146403985955179357125",
                "276476593318096460502599337612230910394",
                "158250945864631500959469124721084417159",
                "233166840403981109907258691657686040463",
                "215532221752914143205013741330028942691",
                "221687927859367072373701619331571149480",
                "96161300291455844339572552557112510639"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-29264-7c563c9a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7",
        "target":  {
            "file":  "src/include/cpu/x86/smm.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "115696841179505252658204336835515106776",
            "length":  434
        },
        "id":  "CVE-2022-29264-7de098f4",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7",
        "target":  {
            "file":  "src/cpu/x86/mp_init.c",
            "function":  "install_relocation_handler"
        }
    }
]

vanir_signatures_modified

"2026-10-21T08:19:47Z"