--- title: "Insyde kernel vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/insyde/kernel type: product description: "Insyde kernel has 33 published CVEs, 0 in CISA KEV and 1 with public exploits." updated: 2025-05-15 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Insyde kernel vulnerabilities Vendor: [Insyde](https://radicalnotion.ai/vendor/insyde) - **Published CVEs:** 33 - **In CISA KEV:** 0 - **With a public exploit:** 1 - **With a patch:** 27 - **Average CVSS:** 7.2 - **First CVE:** 2021-12-01 - **Latest CVE:** 2025-05-15 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 1 | | High | 18 | | Medium | 14 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-367](https://radicalnotion.ai/cwe/cwe-367) | Time-of-check Time-of-use (TOCTOU) Race Condition | 15 | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 8 | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 2 | | [CWE-124](https://radicalnotion.ai/cwe/cwe-124) | Buffer Underwrite ('Buffer Underflow') | 2 | | [CWE-252](https://radicalnotion.ai/cwe/cwe-252) | Unchecked Return Value | 1 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-754](https://radicalnotion.ai/cwe/cwe-754) | Improper Check for Unusual or Exceptional Conditions | 1 | | [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2021 | 1 | | 2022 | 26 | | 2023 | 1 | | 2024 | 3 | | 2025 | 2 | ## Affected versions (top 24 of 112) | Version | Kind | CVEs | | --- | --- | --- | | 5.4 \<= v \< 5.4.05.44.23 | range | 9 | | 5.5 \<= v \< 5.5.05.52.23 | range | 9 | | 5.3 \<= v \< 5.3.05.36.23 | range | 7 | | 5.3 \<= v \< 5.3.05.36.25 | range | 7 | | 5.4 \<= v \< 5.4.05.44.25 | range | 7 | | 5.2 \<= v \< 5.2.05.27.23 | range | 6 | | 5.2 \<= v \< 5.2.05.27.25 | range | 6 | | 5.5 \<= v \< 5.5.05.52.25 | range | 6 | | 5.0 \<= v \<= 5.5 | range | 5 | | 5.2 | range | 3 | | 5.2 \<= v \< 5.2.05.27.21 | range | 3 | | 5.3 | range | 3 | | 5.4.05.44.23 | patched | 9 | | 5.5.05.52.23 | patched | 9 | | 5.3.05.36.23 | patched | 7 | | 5.3.05.36.25 | patched | 7 | | 5.4.05.44.25 | patched | 7 | | 5.2.05.27.23 | patched | 6 | | 5.2.05.27.25 | patched | 6 | | 5.5.05.52.25 | patched | 6 | | 5.2.05.27.21 | patched | 3 | | 5.3.05.36.21 | patched | 3 | | 5.4.05.44.21 | patched | 3 | | 5.5.05.52.21 | patched | 3 | ## CVEs (first 30 of 33, most severe first) | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2024-52880 | - | high | 7.9 | No | No | Yes | | CVE-2024-49200 | - | medium | 6.4 | No | No | No | | CVE-2024-25078 | - | high | 7.4 | No | No | Yes | | CVE-2023-47252 | - | medium | 6.3 | No | No | Yes | | CVE-2022-46897 | - | medium | 5.3 | No | No | No | | CVE-2023-28468 | - | medium | 6.5 | No | No | No | | CVE-2022-36337 | - | high | 8.2 | No | No | No | | CVE-2022-35407 | - | high | 7.8 | No | No | No | | CVE-2022-35897 | - | medium | 6.8 | No | No | No | | CVE-2022-30772 | - | high | 8.2 | No | No | Yes | | CVE-2022-30771 | - | high | 8.2 | No | No | Yes | | CVE-2022-30283 | - | high | 7.5 | No | No | Yes | | CVE-2022-29279 | - | high | 8.2 | No | No | Yes | | CVE-2022-29278 | - | high | 8.2 | No | No | Yes | | CVE-2022-29276 | - | high | 8.2 | No | No | Yes | | CVE-2022-29275 | - | high | 8.2 | No | No | Yes | | CVE-2022-33986 | - | medium | 6.4 | No | No | Yes | | CVE-2022-33985 | - | high | 7.0 | No | No | Yes | | CVE-2022-33984 | - | high | 7.0 | No | No | Yes | | CVE-2022-33983 | - | high | 7.0 | No | No | Yes | | CVE-2022-33982 | - | medium | 6.4 | No | No | Yes | | CVE-2022-33909 | - | high | 7.0 | No | No | Yes | | CVE-2022-33908 | - | high | 7.0 | No | No | Yes | | CVE-2022-33907 | - | medium | 6.4 | No | No | Yes | | CVE-2022-33906 | - | medium | 6.4 | No | No | Yes | | CVE-2022-33905 | - | high | 7.0 | No | No | Yes | | CVE-2022-32267 | - | medium | 6.4 | No | No | Yes | | CVE-2022-32266 | - | medium | 6.4 | No | No | Yes | | CVE-2022-31243 | - | medium | 6.4 | No | No | Yes | | CVE-2022-30774 | - | medium | 6.4 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Insyde kernel have? Insyde kernel has 33 published CVE records since 2021. ### How many Insyde kernel CVEs are in CISA KEV? None of Insyde kernel's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Insyde kernel vulnerabilities? Yes — 1 of Insyde kernel's CVEs have a known public exploit. ### Which versions of Insyde kernel are affected? 112 distinct Insyde kernel versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Insyde kernel CVEs? Insyde kernel's CVEs most often map to these CWE weakness types: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-787 (Out-of-bounds Write), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-124 (Buffer Underwrite ('Buffer Underflow')). ### How many critical Insyde kernel vulnerabilities are there? Insyde kernel has 1 critical and 18 high-severity CVEs. ### What is the average severity of Insyde kernel CVEs? The average CVSS base score across Insyde kernel's scored CVEs is 7.2. ## Other products from this vendor - [InsydeH2O](https://radicalnotion.ai/vendor/insyde/insydeh2o) (87 CVEs) - [InsydeH2O tools](https://radicalnotion.ai/vendor/insyde/insydeh2o-tools) (4 CVEs) - [h2offt](https://radicalnotion.ai/vendor/insyde/h2offt) (2 CVEs) - [insydeh20](https://radicalnotion.ai/vendor/insyde/insydeh20) (2 CVEs) - [h2oelv](https://radicalnotion.ai/vendor/insyde/h2oelv) (1 CVEs) - [h2ooae](https://radicalnotion.ai/vendor/insyde/h2ooae) (1 CVEs) - [h2opcm](https://radicalnotion.ai/vendor/insyde/h2opcm) (1 CVEs) - [h2osde](https://radicalnotion.ai/vendor/insyde/h2osde) (1 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/insyde/kernel). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.